Use model permissions for this. The check should be `event.profile.userid in user.user_organizations_owned_ids()`. siteadmin should not be able to send mail to participants.