SSO 用户无需审批却出现 403 错误

Also consider this use case: