Item10311: Trunk didn't check access permissions

Syncing up Release11 branche with trunk.  Trunk was missing the check
for change authority.

git-svn-id: http://svn.foswiki.org/trunk@10763 0b4bb1d4-4e5a-0410-9cc4-b2b747904278

core/lib/Foswiki/UI/Manage.pm

@@ -470,6 +470,18 @@ sub _action_restoreRevision {
     # read the current topic
     my $meta = Foswiki::Meta->load( $session, $web, $topic );
 
+    if ( !$meta->haveAccess('CHANGE') ) {
+
+        # user has no permission to change the topic
+        throw Foswiki::OopsException(
+            'accessdenied',
+            def    => 'topic_access',
+            web    => $web,
+            topic  => $topic,
+            params => [ 'change', 'denied' ]
+        );
+    }
+
     # read the old topic
     my $rev = $query->param('rev');
     my $requestedRev = Foswiki::Store::cleanUpRevID( $query->param('rev') );