My proposal for behaviour for acces Denied When User is logged with a remeberme token

Without set anything, the behaviour is the same as actually.
In the Firewall config adding a not_full_fledged_handler waiting a service handler or a predefined value :

• predefined values :
  • "original" "redirect" for the same behavior than actual replaced bySymfony\Component\Security\Http\Authorization\NotFullFledgedRedirectToStartAuthenticationHandler
  • "same" "equal" for if a user is logged but not not full fledged (and the attribute is not IS_AUTHENTICATED_FULLY) he has the same acces than if he was full logged. this value is replaced bySymfony\Component\Security\Http\Authorization\NotFullFledgedEqualNormalLoginHandler
• user can create his own service too, class have to implementsSymfony\Component\Security\Http\Authorization\NotFullFledgedHandlerInterface with one method "handle"
  this method can return a reponse to change original Exception Response or null for continue to throw the original access denied exception.