Software delivery permissions

I have started to play with xlr 9.5.4 in my test env. I am very hopeful about software delivery but couldn’t find to set permissions neither for delivery pattern nor for delivery itself. There are just folder permissions which means all users permitted in folder level can edit all deliveries. For example, there is a delivery pattern where a delivery is created from this pattern by a release. There are stages for both project manager and also release manager in this delivery. So I have to give permission them on folder level. So can both pm and rm approve each other’s stage? Please say I am wrong!