make so that only staff and admins can see event notes

bug fix - check for at least 1 connection type with "A" permission before showing the 'add' button (even if the user has the addConnection bit)