check permission instead of allowed content type to authorize a person to add events