Function user_authorization 

pub fn user_authorization(actor: Actor, admin: bool) -> Authorization

Phase A’s capability grants (§11): every user acts on their own scope and the user-controllable units; root and planarian-admin members are administrators and approvers. I17 holds because root always is (is_administrator; the proof is proofs::i17_administrators_never_empty).