[Plugin: The Events Calendar] Security Problem with /wp-admin/

I’ve locked down a client’s /wp-admin/ directory with a standard apache “require user xxxxx” lock per this article about WordPress security…

http://designicu.com/securing-your-wordpress-site/

However, now, when a user visits the calendar/events page on my client’s site they’re asked to authenticate — leading me to think that the plugin is accessing some function from inside /wp-admin/ to display the calendar.

Is this something that’s been fixed in later/fuller releases? Or is there a way around it?

TIA,

Sean

http://ww.wp.xz.cn/extend/plugins/the-events-calendar/