4702: Missing permission options (default permissions too extensive)

bugear

What version are you running?

2.5.17

What's the URL of the page this enhancement relates to, if any?

/r/review-request-id/

Describe the enhancement and the motivation for it.

Extend available permissions (both user and role based). I would really appreciate to have an opportunity to make some users not being able to post reviews and approvals and modify reviewers/review groups after first publish. I would also like to forbid submitter/owner to post approval to his own review request.

What operating system are you using? What browser?

N/A

Please provide any additional information below.