refs #4603 - plugin-rbac - properly check engine resource for permissions