I have a document library that has a workflow that allows a document to become "Approved" through a number of approval requests. At the end of the workflow I'd like to somehow change the permission on the particular document to be read-only to all users except the site owner(s). That way when a document becomes approved, no one except an admin can change it.
I was originally thinking that at the end of the workflow I could move the document to another library that had read-only library permissions but the problem with that is I'll lose all the workflow history/audit information for the document.
Is this possible?