ExportAllEventsHandler: 403 if not allowed