解决：org.springframework.security.access.AccessDeniedException: Access is denied

最新推荐文章于 2024-08-19 19:24:21 发布

东天里的冬天

最新推荐文章于 2024-08-19 19:24:21 发布

阅读量6.5w

点赞数 5

分类专栏：错误积累 SpringSecurity 文章标签： SpringSecurity

本文链接：https://blog.csdn.net/gwd1154978352/article/details/73992108

版权

在使用SpringSecurity整合时，从数据库获取用户遇到AccessDeniedException: Access is denied错误。问题关键在于`spring-security.xml`配置，拦截URL的access属性需包含`hasRole()`，如：`<intercept-url pattern="/**" access="hasRole('ROLE_USER')"`，否则将导致权限错误。

摘要由CSDN通过智能技术生成

最近在使用SpringSecurity时涉及到从数据库中获取用户，结果一直报错，错误如下

Secure object: FilterInvocation: URL: /index.jsp; Attributes: [hasRole('ROLE_USER')]
2017-06-29 23:02:27 731 [DEBUG] Previously Authenticated: org.springframework.security.authentication.AnonymousAuthenticationToken@9055e4a6: Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@957e: RemoteIpAddress: 127.0.0.1; SessionId: null; Granted Authorities: ROLE_ANONYMOUS
2017-06-29 23:02:27 764 [DEBUG] Voter: org.springframework.security.web.access.expression.WebExpressionVoter@4337be56, returned: -1
2017-06-29 23:02:27 766 [DEBUG] Returning cached instance of singleton bean 'sqlSessionFactory'
2017-06-29 23:02:27 774 [DEBUG] Access is denied (user is anonymous); redirecting to authentication entry point
org.springframework.security.access.AccessDeniedException: Access is denied
    at org.springframework.security.access.vote.AffirmativeBased.decide(AffirmativeBased.java:84)
    at org.springframework.security.access.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:233)
    at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:124)
    at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:91)
    at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
    at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:114)
    at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
    at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:137)
    at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
    at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:111)
    at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
    at org.springfra