authorization done for events