[workflow-publication] Added code to handle the role verification for the case when the workflow roles contain subgroups.
Added API in the PublicationRolesService to get all the groups for a user, with all the hierarchy (parents of subgroups, etc), just as it is done for the rights implementation (actually, the code is copied from the rigths implementation).