setup authorized views for events CRUD controller