added user check for private event to service layer