I need a way to restrict deviation status changes based on roles. Specifically, when a deviation is created by a 'Supervisor', it should always be marked as 'open'. The 'Construction Manager' should then decide whether it is 'approved' or 'rejected'. If rejected, the Supervisor cannot make changes. If approved, the Supervisor can change the status to 'in progress' or 'work completed'. The Construction Manager should have the ability to change to any status at any time. Current data restriction settings do not allow for this level of control.