Fix bug, add authorization to viewing (and later editing) events