SharePoint(2007 that is) content approval can be tricky. For example. Below text is displayed when approvers are trying to approve/reject items.
"Note that rejecting an item does not delete it, and that users who know the exact URL of a rejected item can still view it."
And business users would raise questions about whether the the approval works as they desire: Rejecting item should make it disappear. No one should see it except the author and approver.
The text above makes it seem like there is easy back door (direct url) to see the item. Is that how it works? What is best way to explain this? I am researching. Let me know if you have any insights.