We have developped app which is connecting to the SF by using Rest API.Also we fased with the same problems that app can't be used with 
PE and GE orgs. based on this doc: https://help.salesforce.com/HTViewSolution?id=000005140&language=en_US
My questions beased on this:
1. If this is still correct rule that each app which wants to use REST API and access PE and GE orgs. need to pass security review? Also based on this doc:http://www.salesforce.com/us/developer/docs/packagingGuide/index_Left.htm#StartTopic=Content/dev_packages_api_access.htm
2. Can our application pass security review and not be part of the Software Vendor or Consultant Partner program? In other words if this is requarament? 
3. How much it costs to pass security review? 
 

We have developped app which is connecting to the SF by using Rest API.Also we fased with the same problems that app can't be used with 
PE and GE orgs. based on this doc: https://help.salesforce.com/HTViewSolution?id=000005140&language=en_US
My questions beased on this:
1. If this is still correct rule that each app which wants to use REST API and access PE and GE orgs. need to pass security review? Also based on this doc:http://www.salesforce.com/us/developer/docs/packagingGuide/index_Left.htm#StartTopic=Content/dev_packages_api_access.htm
2. Can our application pass security review and not be part of the Software Vendor or Consultant Partner program? In other words if this is requarament? 
3. How much it costs to pass security review? 
 

Does anyone know a way around the restriction of Salesforce.com's requirement to use enterprise edition in order to use the API?

My customers have professional edition and don't want to upgrade to enterprise yet they want to merge functionality with other premise based systems which requires the API.

Is there a way to turn on the API with professional API?

Any work arounds?

Thanks!