I have a problem that may or may not have a solution and am looking for
ideas from the community.

Here's the scenario. We have a document control library we are
migrating most of our policy and procedures into. The libraries have
versioning and approval turned on. When a document is moved into the
library or a revision is submitted we start the basic approval workflow.
Here is the problem. While wanting users to be able to approve the
workflow we don't want to allow them to make any changes to the
document, simply approve or reject the workflow item. As of now we
simply put them into a group with approval rights and move them out
after the workflow is complete, but as you might guess during this time
they can modify that or any other document in the library and approve
versions within the library.

Does anyone know of a way to create a group that can only modify\approve
workflows and not the documents themselves? Does this sound like
something that should be instituted during a custom workflow (turning
off rights when it reaches an approver and turning them off once their
actions is completed?

Also, and along the same lines, after creating a custom workflow and
assigning it to a document, unlike the standard approval workflow that
can be used against the same document multiple times, the custom
workflow option isn't available after using it once, simply not an
option on the same document. Is there a way to allow a custom workflow
to be used assigned repeatedly to the same document?