restrict guest access to private events