How to Prevent AP View Role/Privilege from Editing Invoice Distributions During Approval Workflow?

Organization Name (Required - If you are an Oracle Partner, please provide the organization you are logging the idea on behalf of):

NFCU

Description (Required):

We use the AP Inquiry /View role / ORA_AP_PAYABLES_INVOICE_INQUIRY_DUTY privilege which is designed to provide view‑only access to the invoice module. However, we’ve identified an issue: if these users are listed as an approver on an invoice, they gain the ability - through the BPM Actions menu - to edit invoice distributions during the approval workflow. This means they can modify invoice details, and those changes can move through the approval process without any audit trail indicating who made the updates.