Duck admin user authorization