Approval contains the intent for emeritus/removed and therefore should also be private in that case

process/permissions.py

@@ -97,7 +97,7 @@ class RequirementVisitorPermissions(ProcessVisitorPermissions):
 
         # Declarations of intent for emeritus/removed processes are only posted
         # on -private, and must therefore be only visible to DDs
-        if self.requirement.type == "intent":
+        if self.requirement.type in ("intent", "approval"):
             if (self.process.applying_for not in (const.STATUS_EMERITUS_DD, const.STATUS_REMOVED_DD)
                     or (self.visitor is not None and self.visitor.is_dd)
                     or (self.visitor == self.person)):