I want to set up a workflow in a custom module. When a user in Role1 sets a field to a value of approved, then that field and another set of fields in that object should become read-only for that person and anyone else not in Role 2.

How can I implement this in 5.0?