expose only public events by default in the /events REST service. Queries for specific IDs will be satisfied regardless the publicness

java/com.sap.sailing.server.gateway/src/com/sap/sailing/server/gateway/jaxrs/api/EventsResource.java

@@ -34,7 +34,9 @@ public class EventsResource extends AbstractSailingServerResource {
         JsonSerializer<EventBase> eventSerializer = new EventJsonSerializer(new VenueJsonSerializer(new CourseAreaJsonSerializer()));
         JSONArray result = new JSONArray();
         for (EventBase event : getService().getAllEvents()) {
-            result.add(eventSerializer.serialize(event));
+            if (event.isPublic()) {
+                result.add(eventSerializer.serialize(event));
+            }
         }
         String json = result.toJSONString();
         return Response.ok(json, MediaType.APPLICATION_JSON).build();