don't allow rejected when workflow is assigned

fixes #4974