In Model driven App,

I have a business process flow $($Customer Onboarding$)$ in SMART Audit Customers form,

Add JavaScript on In Review Stage to Only allow SMART Audit Customers record owner to update arb$\_$AccountManagerApproved field.

If we can do this by security also, please suggest. But by JS please provide me the solution.