Separation of rights site manager release vs. display

We would like to separate the rights for the display of hours from the release for site managers.

Specifically:

1. A site manager should be able to see ALL hours of his team members and ALL hours on his projects

2. But he is only allowed to release the hours for which he is also stored in the project as site manager?