permissions for events and groups