some work on events permissions