 #### Event methods ####
 #######################
   robot.respond /sensu events(?: for (?:http\:\/\/)?(.*))?/i, (msg) ->
+    unless robot.auth.hasRole(msg.envelope.user, config.sensu_roles)
+      msg.send "Access denied."
+      return
     validateVars
     if msg.match[1]
       client = '/' + msg.match[1]



  robot.respond /(?:sensu)? remove client (?:http\:\/\/)?(.*)/i, (msg) ->
    validateVars
    client= msg.match[1]



  # get client info (not history)
  robot.respond /sensu client (?:http\:\/\/)?(.*)/i, (msg) ->
    unless robot.auth.hasRole(msg.envelope.user, config.sensu_roles)
      msg.send "Access denied."
      return
    validateVars
    client = msg.match[1]
    # ignore if user asks for history
