Fix #20: Owner role requires Owner approval.