feat(events): set event permission on create/update

feat(events): set event permission on create/update #807