Some TAs get access denied when clicking "approve"

entry is approved though, so the access denied should be from the redirect after the approve?