users can now only see their own events