use allowy for domain permissions
use allowy for event permissions