Yes, this would take code change. You can set the attendee list to show to either public or private users... not to attendees. However, you COULD make it available only after the event... just manually turn that feature on AFTER the event... then set the config to all the display of past events so it is still accessible.