um ... let's add some real permission restrictions
added new role that restricts user to edit their own events