Announcement Announcement Module
Collapse
No announcement yet.
"Access is denied" when i want to logout Page Title Module
Move Remove Collapse
This topic is closed
X
X
Conversation Detail Module
Collapse
  • Filter
  • Time
  • Show
Clear All
new posts

  • "Access is denied" when i want to logout

    hi,
    i'm begginer with acegi security, when i try to logout i always have this message :
    Code:
    org.acegisecurity.AccessDeniedException: Access is denied
    	org.acegisecurity.vote.AffirmativeBased.decide(AffirmativeBased.java:68)
    	org.acegisecurity.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:292)
    	org.acegisecurity.intercept.web.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:104)
    	org.acegisecurity.intercept.web.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:72)
    	org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:275)
    	org.acegisecurity.ui.AbstractProcessingFilter.doFilter(AbstractProcessingFilter.java:229)
    	org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:275)
    	org.acegisecurity.ui.logout.LogoutFilter.doFilter(LogoutFilter.java:106)
    	org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:275)
    	org.acegisecurity.context.HttpSessionContextIntegrationFilter.doFilter(HttpSessionContextIntegrationFilter.java:286)
    	org.acegisecurity.util.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:275)
    	org.acegisecurity.util.FilterChainProxy.doFilter(FilterChainProxy.java:149)
    	org.acegisecurity.util.FilterToBeanProxy.doFilter(FilterToBeanProxy.java:98)
    and this is my applicationContext.xml for acegi_security:
    Code:
    <bean id="logoutFilter" class="org.acegisecurity.ui.logout.LogoutFilter">
    		<constructor-arg value="/logoutSuccess.jsp" />
    		<constructor-arg>
    			<list>
    				<bean class="org.acegisecurity.ui.logout.SecurityContextLogoutHandler">
    					<property name="invalidateHttpSession">
    						<value>true</value>
    					</property>
    
    				</bean>
    			</list>
    		</constructor-arg>
    
    	</bean>
    there is somthing wrong or have i forget somthing ?
    thanx

  • #2
    Check your intercept-url patterns, there might be something wrong there.

    Comment


    • #3
      it works

      i had error in the order of filter in the bean of "filterChainProxy" :

      before:
      Code:
      <bean id="filterChainProxy" class="org.acegisecurity.util.FilterChainProxy">
      		<property name="filterInvocationDefinitionSource">
      			<value>
      				CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
      				PATTERN_TYPE_APACHE_ANT
      				/**=httpSessionContextIntegrationFilter,logoutFilter,authenticationProcessingFilter,filterInvocationInterceptor,exceptionTranslationFilter</value>
      		</property>
      	</bean>
      after :
      Code:
      <bean id="filterChainProxy" class="org.acegisecurity.util.FilterChainProxy">
      		<property name="filterInvocationDefinitionSource">
      			<value>
      				CONVERT_URL_TO_LOWERCASE_BEFORE_COMPARISON
      				PATTERN_TYPE_APACHE_ANT
      				/**=httpSessionContextIntegrationFilter,logoutFilter,exceptionTranslationFilter,authenticationProcessingFilter,filterInvocationInterceptor</value>
      		</property>
      	</bean>
      thank you!

      Comment


      • #4
        sorry

        sorry, i make mistake in the title of my thread, it's not when i want to logout, i have this error when i try to access to url witch is secured, and i want display my denied.jsp
        it works now

        thank you

        Comment

        Working...
        X