Prevent Requestors from setting the 'approval' ticket to status 'Resolve'

I have setup the approval work flow and it is working great expect for
one problem, when I am creating and ticket, I can see the approval
ticket in the links and I can open it too. The problem now is I can set
to ‘Resolve’ by clicking on the status links. Even though I am neither
the owner of the ‘Approval’ ticket or has any rights on the ___Approval
Queue.

Can some body please explain me how to prevent the requestors from
setting the Approval tickets status to ‘Resolve’?

Thanks

Naweed

The information contained in this e-mail message is intended only
for the personal and confidential use of the recipient(s) named
above. This message may be an attorney-client communication and/or
work product and as such is privileged and confidential. If the
reader of this message is not the intended recipient or an agent
responsible for delivering it to the intended recipient, you are
hereby notified that you have received this document in error and
that any review, dissemination, distribution, or copying of this
message is strictly prohibited. If you have received this
communication in error, please notify us immediately by e-mail, and
delete the original message.

I have setup the approval work flow and it is working great expect for one problem, when I am
creating and ticket, I can see the approval ticket in the links and I can open it too. The
problem now is I can set to Resolve' by clicking on the status links. Even though I am neither the owner of the Approval’ ticket or has any rights on the ___Approval Queue.

Can some body please explain me how to prevent the requestors from setting the Approval
tickets status to `Resolve’?

You must have ModifyTicket granted too broadly. You probably even
want to restrict ShowTicket in __Approval to folks who should be in
there (or to the AdminCc/Owner roles).

-kevin