Security and permission checking. Non-admins may only view/edit their own events