... Our workflow initiators were able to get around the approval process because they figured out that as owners of the job, they could approve their changes. We circumvented this by changing the owner of all jobs to some generic "iwoven" account...