Approve or reject an unauthorised return request