I am using events to fire an order, basically using them as a vehicle for a master/slave connection with an IoT device, through the blockchain.
Ideally i want to always verify the right msg.sender is sending this order and emitting the event, so i made a function with this access control in place. However i have noticed that i can directly call the event with the proper arguments to emit it (i tested this out on truffle), so malicious users could bypass the function with access control entirely.
It doesn't seem like its possible to use the internal or private visibilities when declaring events, since they're not functions.
So my question is, is there no way to enforce access control or visibility on events? Are there any plans to address this, or am i just using them the wrong way?