fixed deny/approve