Change default event permissions to be NO_PERMISSIONS instead of 'OK'…

… until saved. Closes #242

lib/class.role.php

@@ -320,6 +320,10 @@ public function canAccessPage($page_id){
 		 * `EventPermissions` constants, `NO_PERMISSIONS`, `OWN_ENTRIES`, `ALL_ENTRIES`
 		 * or `CREATE`.
 		 *
+		 * @since Symphony 2.4
+		 *  This function defaults to false (`NO_PERMISSIONS`) if there are no matches.
+		 *  This means the Role must be updated with all the event permissions before the
+		 *  event can be used.
 		 * @param string $event_handle
 		 * @param string $action
 		 * @param integer $required_level
@@ -332,8 +336,9 @@ public function canProcessEvent($event_handle, $action, $required_level){
 				return ($event_permissions[$event_handle][$action] >= $required_level);
 			}
 
-			// If the event wasn't in the array, then assume it's ok.
-			return true;
+			// If the event wasn't in the array, then assume it's not ok.
+			// Note this a change since Members 1.4. RE: #242.
+			return false;
 		}
 	}