feat: allow other users to reschedule

Author: cjustinobi

src/handlers/appointments.rs

@@ -110,7 +110,7 @@ pub async fn confirm_appointment(
     Ok(ApiResponse::success(appt))
 }
 
-/// Reschedule an appointment. Used by Hospital staff
+/// Reschedule an appointment
 #[utoipa::path(
     put,
     path = "/api/appointments/reschedule/{appointment_id}",

src/hospitals/appointments.rs

@@ -93,14 +93,16 @@ pub fn reschedule_appointment(
     user: &User,
     new_time: DateTime<Utc>,
 ) -> Result<Appointment, AppError> {
-    if user.role != Role::Hospital {
-        return Err(AppError::Unauthorized(
-            "Only hospitals can reschedule appointments".into(),
-        ));
+    match user.role {
+        Role::Hospital => {
+            assert_hospital_owns_appointment(conn, appointment_id, user.id)?;
+        }
+        Role::Donor | Role::Patient => {
+            assert_user_owns_appointment(conn, appointment_id, user.id)?;
+        }
+        _ => return Err(AppError::Unauthorized("Invalid role".into())),
     }
 
-    assert_hospital_owns_appointment(conn, appointment_id, user.id)?;
-
     diesel::update(appointments::table.find(appointment_id))
         .set((
             appointments::status.eq(AppointmentStatusEnum::Rescheduled),