Help with Approval Function

Hi, we have an approval rule configured which requires the approval of groups membership changes. Up to version 6.0.3, when adding users to groups using the SDK interface, you could just omit the AllowApproval control and even though there is an approval configured within ActiveRoles Server the user got added to the AD group, no Approval Task was created. This was quite useful when you wanted to programmatically add users to groups requiring approval but removing the users from the same groups should be performed without an approval. However since version 6.0.4 and also in version 6.1.0. If you use the same script to add a user to a group using the SDK interface, again omitting the AllowApproval control, the user gets added without approval but an Approval Task gets created on the Approval Web Page anyway.

Now, I understand that Quest says as from version 6.0.4 onwards, always add the AllowApproval control to our scripts. However this means that using scripts, I no longer can differentiate between adding users to group or removing users from groups. Both scripts have now the AllowApproval control set, meaning I need to approve both operations on my Approval WebSite.

Now what I need is an approval rule which is flexible enough to determine if a user gets added to the group or removed. Can anyone tell me how I can create an Approval Condition Filter which allows me to determine if a user got added to a group or removed, only asking for approval when a user got added? Is this possible at all?