Give appropriate permissions to the "anonymous" user, namely permissions to add events but
not to automatically approve their own events. Those events will then need to be approved by someone with necessary permissions before they'll display on the calendar.
Anyone not logged in is "anonymous" by default.
Dan O.
------------------