security improvements and ui update on view_event