Fix regression introduced by #11008

[samarthjain]

#11008 incorrectly got rid of the need to examine all the resources when the AllowAllAuthorizer is configured. The loop is still needed to de-dupe the entries.