Simplify alert validation logic and use it with other validation logic

The following discussion from !178399 (merged) should be addressed:

  • @arfedoro started a discussion: (+3 comments)

    question (non-blocking)

    If approval action is a requirement, what do you think about adding it to validatePolicy method?