Function require_admin 

pub(crate) async fn require_admin(services: &State, sender: &UserId) -> Result

Assert the caller is a server administrator. Generic Synapse admin endpoints use this plain check, not the MSC4323 anti-enumeration authorize() guard whose self-target and admin-target ordering does not fit them.