You can add record access to any table in Security for your database file.
now they need to change certain related records after the status is Finished. How would I make this possible?
From a business rule perspective; does this mean that the status really is not 'finished'? If so then a normal approach is to 're-open' and let them edit then go through the normal 'finish' procedure again...