| Base implementation of
AccessDeniedHandler . This implementation sends a 403 (SC_FORBIDDEN) HTTP error
code. In addition, if a
AccessDeniedHandlerImpl.errorPage is defined, the implementation will perform a request dispatcher
"forward" to the specified error page view. Being a "forward", the SecurityContextHolder will remain
populated. This is of benefit if the view (or a tag library or macro) wishes to access the
SecurityContextHolder. The request scope will also be populated with the exception itself, available
from the key
AccessDeniedHandlerImpl.ACEGI_SECURITY_ACCESS_DENIED_EXCEPTION_KEY .
author:
Ben Alex
version:
$Id: AccessDeniedHandlerImpl.java 1784 2007-02-24 21:00:24Z luke_t $ |
