[BACKLOG-290] "canAdminister" refactoring to use a UnauthorizedAccessException....