So yeah, I pulled the journal entry approval functionality from a number of roles to prevent them from using that page and making an end run around the workflow