restrict access to events and experiments