diff --git a/notifications.bs b/notifications.bs
index d8d500c..b6c4d45 100644
--- a/notifications.bs
+++ b/notifications.bs
@@ -792,9 +792,12 @@ constructor steps are:
   <p>Run these steps <a>in parallel</a>:
 
   <ol>
-   <li><p>If the result of <a>getting the notifications permission state</a> is not
-   "<code>granted</code>", then <a>queue a task</a> to <a>fire an event</a> named
-   <code>error</code> on <a>this</a>, and abort these steps.
+   <li><p>If <a>this</a>'s <a>relevant settings object</a>'s
+   <a for="environment settings object">origin</a> is not <a>same origin</a> with <a>this</a>'s
+   <a>relevant settings object</a>'s <a for="environment">top-level origin</a> or the result of
+   <a>getting the notifications permission state</a> is not "<code>granted</code>", then
+   <a>queue a task</a> to <a>fire an event</a> named <code>error</code> on <a>this</a>, and abort
+   these steps.
 
    <li><p>Run the <a for=/>notification show steps</a> for <var>notification</var>.
   </ol>
@@ -838,8 +841,13 @@ method steps are:
   <p>Run these steps <a>in parallel</a>:
 
   <ol>
-   <li><p>Let <var>permissionState</var> be the result of
-   <a>requesting permission to use</a> "<a permission><code>notifications</code></a>".
+   <li><p>Let <var>permissionState</var> be "<code>denied</code>".
+
+   <li><p>If <a>this</a>'s <a>relevant settings object</a>'s
+   <a for="environment settings object">origin</a> is <a>same origin</a> with <a>this</a>'s
+   <a>relevant settings object</a>'s <a for="environment">top-level origin</a>, then set
+   <var>permissionState</var> to the result of <a>requesting permission to use</a>
+   "<a permission><code>notifications</code></a>".
 
    <li>
     <p><a>Queue a global task</a> on the <a>DOM manipulation task source</a> given <var>global</var>