Yes, you can do this using a multisignature, e.g. 2-of-2 if two users need to approve it.
For example, if the issuer of an open asset is a multisignature address, then any further issuances of that asset would also need to be done by the same multisignature address.