well for this a simple solution would be to use a secondary data connection, when the form is created create an entry in a list/table to set the value of four fields;
pending approval: all email ids
approvers: blank
disapprovers: blank
all_ids: all email ids
at form load check if the persons email id is in the pending approval field, if so allow him access, if not change the view to readonly.