Refactored `_resolveImplicitRole` into the Authz API
When restoring a revision as a non-manager, aborting early.

Also cleaned up unit test for restoring revision