You'll find in order to do a permission check on a revision, you'll also want to accept the content id. So the content id will also need to be specified on the RESTful path to the revision.