permissions review

app/Policies/UsersPolicy.php

@@ -9,7 +9,14 @@ class UsersPolicy
 {
     public function deleteOther(User $user): bool
     {
-        return $user->role === 1;
+        return $user->role === 1 || $user->role === 2;
+    }
+
+    public function deactivate(User $user, User $userToDeactivate): bool
+    {
+        return in_array($user->role, [1, 2])
+            && $user->role < $userToDeactivate->role
+            && $user->id !== $userToDeactivate->id;
     }
 
     public function validate(User $user): bool