[backend] Use the controller name rather than Object when a model does not exist for authorize_admin method

Fixes #3622