changed 'only-staff' permission to 'can_add_events' permission