Update apps/api/src/policies/policies.service.ts

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
Signed-off-by: Mariano Fuentes <marfuen98@gmail.com>

Author: Marfuen

apps/api/src/policies/policies.service.ts

@@ -1030,6 +1030,11 @@ export class PoliciesService {
 
     if (!policy.pendingVersionId) {
       if (policy.approverId) {
+        if (policy.approverId !== dto.approverId) {
+          throw new BadRequestException(
+            'Only the assigned approver can accept changes',
+          );
+        }
         await db.policy.update({
           where: { id: policyId },
           data: { approverId: null },
@@ -1038,6 +1043,7 @@ export class PoliciesService {
           'This policy has no pending changes to approve. The stale approval request has been cleared — please ask the policy owner to re-submit if a new approval is needed.',
         );
       }
+      }
       throw new BadRequestException('No pending version to approve');
     }