key: add comment
CheckAuthorization: check org may access event