I am trying to create a new PowerApp to get approvals for budgets. I would like to force users to use my application to submit new budget requests, and the request will go through some approval steps based on list data in SharePoint. Users must see the data as read only during that time (but they can submit requests). So How to handle such a situation with Powerapps? Do we manage the security in SharePoint? Or do we store the data in a site where they have permission to everything without telling the users the location of that site and make the data read only in PowerApps? I want the people who can approve to be able to submit requests to this list at the same time. If the request is reject, I want them to be able to edit it again and start another approval process (will be using Flow for the approvals).
Any hint will be helpful as I am new to this platform.