Seconding http://www.asprunner.com/forums/topic/24064-turn-off-drag-and-drop/ This is important, because we get edit control in the lists, but it appears that any user can drag/drop any other user's events to new days, regardless of permissions, when Dynamic Permissions are active. Update: It appears that even with Static Permissions, user test can drag and drop not only his own events, but those owned by user admin.