Function require_owner 

pub async fn require_owner(
    crate_name: &CanonicalName,
    user: &Identity,
    db: &Arc<dyn DbProvider>,
) -> Result<(), ApiError>

Fail unless user owns the crate or is an admin.