vcac 6 - bypass the approval policy

Hi,

strange behavior of the vCAC approval policy.

if i create an approval policy, for example, for the amount of ram > 4000 mb, works good at the first request...the job is in pending approval status.

i approve the vm and the vm is deployed

but later, if the user reconfigures the virtual machine, he is able to  set the RAM to 5000, 6000 mb, up to the maximum configured on the blueprint...

is that normal?

thanks

Alan