Feature summary
phab-ban should tell you you're not authorized before requesting a ban
What actually happens:
After authenticating you, https://phab-ban.toolforge.org/ simply requests "Phabricator user to disable", and only after giving it a user does it say «Sorry Platonides. You are not authorized to ban accounts.»