Approval Unit Hierarchy overrides Data form level security

Summary:

Approval Unit Hierarchy overrides Data form level Read access security

Content (please ensure you mask any confidential information):

Hi Team,

We are facing one challenge that Users who have access in approval unit for their respective entities, get write access to those data forms as well where we have provided read access. It seems that approval unit access overrides data form level read access security. Is it expected behavior?? What's solution for the same?? We need to keep on changing read and write access for data forms to USERS during close time.

Version (include the version you are using, if applicable):