I found that even though I have only enabled others to see the events on my workspace without giving them the rights to add any events, they could still do so.
Although the system will warn the user that he/she does not have the rights to add the event, it still gets added to the calendar.
Is this a bug?