limit users to one approval