[api] do right locking when changing request or review states
- tag 2.4.6