Check user authorization