fixed GET UserEventList with security constraint modifications