Have any of you ever needed to lock specific GL accounts from being posted to? Best workaround I can figure is an approval workflow driven by saved search criteria...but hoping there's something cleaner