Check all role (#4130)

The role must be checked separately

Security/Handler/RoleSecurityHandler.php

@@ -62,11 +62,12 @@ class RoleSecurityHandler implements SecurityHandlerInterface
             $attributes[$pos] = sprintf($this->getBaseRole($admin), $attribute);
         }
 
-        $attributes[] = sprintf($this->getBaseRole($admin), 'ALL');
+        $allRole = sprintf($this->getBaseRole($admin), 'ALL');
 
         try {
             return $this->authorizationChecker->isGranted($this->superAdminRoles)
-                || $this->authorizationChecker->isGranted($attributes, $object);
+                || $this->authorizationChecker->isGranted($attributes, $object)
+                || $this->authorizationChecker->isGranted(array($allRole), $object);
         } catch (AuthenticationCredentialsNotFoundException $e) {
             return false;
         }

Tests/Security/Handler/RoleSecurityHandlerTest.php

@@ -180,6 +180,7 @@ class RoleSecurityHandlerTest extends \PHPUnit_Framework_TestCase
 
             // ALL role
             array(true, array(), 'foo.bar.baz', 'LIST'),
+            array(true, array(), 'foo.bar.baz', array('LIST', 'EDIT')),
         );
     }