fix(SW-1710): use access object references instead

correct incorrect test that granted access incorrectly

apps/scandic-web/components/HotelReservation/MyStay/accessBooking.ts

@@ -5,6 +5,7 @@ export {
   ACCESS_GRANTED,
   accessBooking as default,
   ERROR_BAD_REQUEST,
+  ERROR_FORBIDDEN,
   ERROR_NOT_FOUND,
   ERROR_UNAUTHORIZED,
 }
@@ -29,14 +30,18 @@ function accessBooking(
   }
 
   if (guest.lastName === lastName) {
-    const params = new URLSearchParams(cookie)
-    if (
-      params.get("firstName") === guest.firstName &&
-      params.get("email") === guest.email
-    ) {
-      return ACCESS_GRANTED
+    if (user) {
+      return ERROR_FORBIDDEN
     } else {
-      return ERROR_BAD_REQUEST
+      const params = new URLSearchParams(cookie)
+      if (
+        params.get("firstName") === guest.firstName &&
+        params.get("email") === guest.email
+      ) {
+        return ACCESS_GRANTED
+      } else {
+        return ERROR_BAD_REQUEST
+      }
     }
   }
 
@@ -53,6 +58,11 @@ const ERROR_UNAUTHORIZED = {
   status: 401,
 } as const
 
+const ERROR_FORBIDDEN = {
+  code: "FORBIDDEN",
+  status: 403,
+} as const
+
 const ERROR_NOT_FOUND = {
   code: "NOT_FOUND",
   status: 404,