Set the 'Guard' in the portal_workflow to:

python: user.getUserName() != container.portal_workflow.getInfoFor(here, 'actor')