added rights for admin users to approve and decline events