Change workflow: newly_registered can only be approved