added inheritance structure + administrators can now approve/reject requests