Constant ROLE_ADMIN 

pub const ROLE_ADMIN: &str = "admin";

Role string meaning “has admin access”. Anything else is treated as a regular user; the admin middleware only unlocks /admin when this matches exactly.