dont send events to users if they dont have permission for the actions
fix