You are correct, my mistake.
For such cases you should use the lower level model Call Facebook with Session.
You can see its usage in the non-read-only service Send Notification (in package Facebook/API/Send Notification).
Note, however, that Facebook has announced Notifications.send is no longer supported, so you probably won't be able to actually test the Send Notification service.
For best results, use the Firefox browser..