New version of method getAllowedResources for user and facility

 - user one query instead of lots of queries in for cycle