Fix reservation policy

Author: mchev

app/Policies/ReservationPolicy.php

@@ -25,8 +25,8 @@ public function viewAny(?User $user): bool
     public function view(User $user, Reservation $reservation): bool
     {
         return $user->id === $reservation->user_id ||
-               $user->isAdminOf($reservation->organization) ||
-               $user->isMemberOf($reservation->organization);
+               ($reservation->lenderOrganization && ($user->isAdminOf($reservation->lenderOrganization) || $user->isMemberOf($reservation->lenderOrganization))) ||
+               ($reservation->borrowerOrganization && ($user->isAdminOf($reservation->borrowerOrganization) || $user->isMemberOf($reservation->borrowerOrganization)));
     }
 
     /**
@@ -43,7 +43,8 @@ public function create(User $user, Organization $organization): bool
     public function update(User $user, Reservation $reservation): bool
     {
         return $user->id === $reservation->user_id ||
-               $user->isAdminOf($reservation->organization);
+               ($reservation->lenderOrganization && $user->isAdminOf($reservation->lenderOrganization)) ||
+               ($reservation->borrowerOrganization && $user->isAdminOf($reservation->borrowerOrganization));
     }
 
     /**
@@ -52,22 +53,25 @@ public function update(User $user, Reservation $reservation): bool
     public function delete(User $user, Reservation $reservation): bool
     {
         return $user->id === $reservation->user_id ||
-               $user->isAdminOf($reservation->organization);
+               ($reservation->lenderOrganization && $user->isAdminOf($reservation->lenderOrganization)) ||
+               ($reservation->borrowerOrganization && $user->isAdminOf($reservation->borrowerOrganization));
     }
 
     /**
      * Determine whether the user can restore the model.
      */
     public function restore(User $user, Reservation $reservation): bool
     {
-        return $user->isAdminOf($reservation->organization);
+        return ($reservation->lenderOrganization && $user->isAdminOf($reservation->lenderOrganization)) ||
+               ($reservation->borrowerOrganization && $user->isAdminOf($reservation->borrowerOrganization));
     }
 
     /**
      * Determine whether the user can permanently delete the model.
      */
     public function forceDelete(User $user, Reservation $reservation): bool
     {
-        return $user->isAdminOf($reservation->organization);
+        return ($reservation->lenderOrganization && $user->isAdminOf($reservation->lenderOrganization)) ||
+               ($reservation->borrowerOrganization && $user->isAdminOf($reservation->borrowerOrganization));
     }
 }