Hi Pawan,
As Deepthi mention if you have Process controlled workflow then you have to provide process levels accordingly in order for user to make changes.
If you are having Application controlled workflow (BADI one or withtout BADI) then you have to set Personalization BBP_WFL_SECURITY for user to Low... Whenever you upgrade those settings get reset usually with role re-generation.
Thank you
Ritesh