Refactored access checks in content API

1. canManage
Retrieve the raw content profile and performs 1 authz check rather than
doing 2

2. getFullContentProfile
Retrieve the raw content profile, retrieve all the roles, perform an
implicit check and check the roles if implicit granted no access