Add Approval field type. Add manage.collection.approval collection level permission. Doesn't render approval field if user's group doesn't have permission