applications uses db approve/deny