fix(security): single-source the request authorization resolver (REST dropped sys_user_role)

fix(security): single-source the request authorization resolver (REST dropped sys_user_role) #7215