Restrict Tester from Setting "In Development" in U'gent Correction

I do not want my tester to set the action "Set to In Development" in my u'gent correction. This should be the developer. However, if a test fails I need the tester to set the action "Reset status to In Development" to flag that testing failed and there is further action required in development.

Unfortunately taking away or applying the authorization key SDHF_01 to my Tester role will only let us do one or the other of the above.

How can achieve my scenario?