Event permissions should configurable such that they do not need to be hardcoded in a permissions file

[Sean Travis Taylor]