Allow user to cancel/reschedule visits but prevent them from processing an appointment

Currently giving them read-only access to calendar is the only way to prevent a user from processing an appointment, but this also prevents them from rescheduling/cancelling visits. Interns should be able to manage the booking/amending of visits on their diary but not process any financials