User subject authorization