docs: public static Access authorizeAllResourceActions(
        final HttpServletRequest request,
        final Iterable<ResourceAction> resourceActions,
        final AuthorizerMapper authorizerMapper
    )
    {
      if (request.getAttribute(AuthConfig.DRUID_ALLOW_UNSECURED_PATH) != null) {
        return Access.OK;
      }
  
      if (request.getAttribute(AuthConfig.DRUID_AUTHORIZATION_CHECKED) != null) {
        throw new ISE("Request already had authorization check.");
      }
  
      Access access = authorizeAllResourceActions(
          authenticationResultFromRequest(request),
          resourceActions,
          authorizerMapper
      );
  
      request.setAttribute(AuthConfig.DRUID_AUTHORIZATION_CHECKED, access.isAllowed());
      return access;
    }