Class AccessDeniedHandlerImpl
- java.lang.Object
-
- org.springframework.security.web.access.AccessDeniedHandlerImpl
-
- All Implemented Interfaces:
AccessDeniedHandler
public class AccessDeniedHandlerImpl extends java.lang.Object implements AccessDeniedHandler
Base implementation ofAccessDeniedHandler
.This implementation sends a 403 (SC_FORBIDDEN) HTTP error code. In addition, if an
errorPage
is defined, the implementation will perform a request dispatcher "forward" to the specified error page view. Being a "forward", theSecurityContextHolder
will remain populated. This is of benefit if the view (or a tag library or macro) wishes to access theSecurityContextHolder
. The request scope will also be populated with the exception itself, available from the keyWebAttributes.ACCESS_DENIED_403
.
-
-
Field Summary
Fields Modifier and Type Field Description protected static org.apache.commons.logging.Log
logger
-
Constructor Summary
Constructors Constructor Description AccessDeniedHandlerImpl()
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description void
handle(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.springframework.security.access.AccessDeniedException accessDeniedException)
Handles an access denied failure.void
setErrorPage(java.lang.String errorPage)
The error page to use.
-
-
-
Method Detail
-
handle
public void handle(javax.servlet.http.HttpServletRequest request, javax.servlet.http.HttpServletResponse response, org.springframework.security.access.AccessDeniedException accessDeniedException) throws java.io.IOException, javax.servlet.ServletException
Description copied from interface:AccessDeniedHandler
Handles an access denied failure.- Specified by:
handle
in interfaceAccessDeniedHandler
- Parameters:
request
- that resulted in anAccessDeniedException
response
- so that the user agent can be advised of the failureaccessDeniedException
- that caused the invocation- Throws:
java.io.IOException
- in the event of an IOExceptionjavax.servlet.ServletException
- in the event of a ServletException
-
setErrorPage
public void setErrorPage(java.lang.String errorPage)
The error page to use. Must begin with a "/" and is interpreted relative to the current context root.- Parameters:
errorPage
- the dispatcher path to display- Throws:
java.lang.IllegalArgumentException
- if the argument doesn't comply with the above limitations
-
-