Permissions question

hello is possible to create more complexe permission for groupe user like

  • user can propose colonne but can’t modify complete project ? with a moderation for admin project
  • user can comment or add subtask but need admin validation ?
    regards