[fix][authorization] Fix multiple roles authorization

[nodece]

Fixes #16574

Motivation

The MultiRolesTokenAuthorizationProvider cannot handle the superuser and tenant admin correctly. It only checks if the role passed in is a superuser, which is incorrect. The correct way is to get a role list from authentication data and then check if the role list contains a superuser.

Modifications

• Override the isSuperAdmin
• Override the validateTenantAdminAccess
• Add test for the MultiRolesTokenAuthorizationProvider

Documentation

• doc-not-needed

[Technoboy-]

If line 129 throws RestException, will here wrap to new RestException(RestException ...) ?

[nodece]

RestException can get the real exception.

public RestException(Throwable t) {
        super(getResponse(t));
    }

    private static Response getResponse(Throwable t) {
        if (t instanceof WebApplicationException) {
            WebApplicationException e = (WebApplicationException) t;
            return e.getResponse();
        } else {
            return Response
                .status(Status.INTERNAL_SERVER_ERROR)
                .entity(getExceptionData(t))
                .type(MediaType.TEXT_PLAIN)
                .build();
        }
    }

[BewareMyPower]

This PR relies on the TenantResources#getTenantAsync method, which relies on the BaseResources#joinPath method that I tried to migrate in #16867. Could you help review that PR so that I can continue cherry-picking and resolving the conflicts?

[nodece]

@BewareMyPower Done.