code: public static Access authorizeAllResourceActions(
        final HttpServletRequest request,
        final Iterable<ResourceAction> resourceActions,
        final AuthorizerMapper authorizerMapper
    )
    {
      if (request.getAttribute(AuthConfig.DRUID_ALLOW_UNSECURED_PATH) != null) {
        return Access.OK;
      }
  
      if (request.getAttribute(AuthConfig.DRUID_AUTHORIZATION_CHECKED) != null) {
        throw new ISE("Request already had authorization check.");
      }
  
      Access access = authorizeAllResourceActions(
          authenticationResultFromRequest(request),
          resourceActions,
          authorizerMapper
      );
  
      request.setAttribute(AuthConfig.DRUID_AUTHORIZATION_CHECKED, access.isAllowed());
      return access;
    }
docs: Check a list of resource-actions to be performed as a result of an HTTP request.
  
  If one of the resource-actions fails the authorization check, this method returns the failed
  Access object from the check.
  
  Otherwise, return ACCESS_OK if all resource-actions were successfully authorized.
  
  This function will set the DRUID_AUTHORIZATION_CHECKED attribute in the request.
  
  If this attribute is already set when this function is called, an exception is thrown.
  
  @param request         HTTP request to be authorized
  @param resourceActions An Iterable of resource-actions to authorize
  
  @return ACCESS_OK or the Access object from the first failed check