Currently in D365F&O a Purchase Requisition submitted to the workflow can be edited by the Approver before approving the Purchase requisition. This behaviour increases the risk of a fraudulent transactions being processed especially if the approver can change the Vendor Account to be that of an employee vendor (e.g., those used for employee reimbursements') prior to approval. Items submitted to the workflow across the entire system should not be able to be edited by anyone unless it's recalled to DRAFT.