Rather having both `_canShareContent` and `_isViewer` invocations, a full `_getContentAccess` method can first invoke `AuthzAPI.getAllRoles`, then use the result of that to potentially short-circuit checks like `_canShareContent`.