Not sure what your question is here. You must be admin to replace notes. Otherwise you must use the append function. Though that requires update metadata rights. There are numerous ways to configure security.
Are you running a record addin? Are you running in the context of the current user? Are you trying to impersonate a user?