Fix for performing a membership change userA: false where userA doesn't have a role on the resource.
Moved TenantsUtil.resolveTenantBoundaryViolations to AuthzApi.canInteract