Distinguish withdrawal permissions

Add distinct withdrawal permissions within stages of workflows. By
default, let the applicant withdraw at any stage. On the submission
page, display the Withdraw button assuming the setting
`ENABLE_SUBMISSION_WITHDRAWAL` is true and the withdrawal permissions
are met.

Issue #3296

hypha/apply/funds/templates/funds/applicationsubmission_detail.html

@@ -111,7 +111,7 @@ <h5>{% blocktrans with stage=object.previous.stage %}Your {{ stage }} applicatio
                                         {% trans "Delete" %}
                                     </a>
                                 {% endif %}
-                                {% if ENABLE_SUBMISSION_WITHDRAWAL and request.user.is_applicant %}
+                                {% if request.user|has_withdraw_perm:object %}
                                     <a
                                         class="link link--withdraw-submission is-active"
                                         href="{% url 'funds:submissions:withdraw' object.id %}">

hypha/apply/funds/templatetags/workflow_tags.py

@@ -1,4 +1,5 @@
 from django import template
+from django.conf import settings
 
 register = template.Library()
 
@@ -18,3 +19,10 @@ def has_edit_perm(user, submission):
 @register.filter
 def has_review_perm(user, submission):
     return check_permission(user, "review", submission)
+
+
+@register.filter
+def has_withdraw_perm(user, submission):
+    if settings.ENABLE_SUBMISSION_WITHDRAWAL:
+        return check_permission(user, "withdraw", submission)
+    return False

hypha/apply/funds/workflow.py

@@ -178,6 +178,9 @@ def can_review(self, user):
     def can_view(self, user):
         return self.can_do(user, "view")
 
+    def can_withdraw(self, user):
+        return self.can_do(user, "withdraw")
+
 
 staff_can = lambda user: user.is_apply_staff  # NOQA
 
@@ -190,7 +193,7 @@ def can_view(self, user):
 community_can = lambda user: user.is_community_reviewer  # NOQA
 
 
-def make_permissions(edit=None, review=None, view=None):
+def make_permissions(edit=None, review=None, view=None, withdraw=None):
     return {
         "edit": edit or [],
         "review": review or [],
@@ -201,6 +204,7 @@ def make_permissions(edit=None, review=None, view=None):
             reviewer_can,
             partner_can,
         ],
+        "withdraw": withdraw or [applicant_can],
     }