Spring Security出现问题：Access is denied

admin管理员组

文章数量:1794759

Spring Security出现问题：Access is denied

报错情况如下： 在登录的时候报错，如下：

org.Springframework.Security.Access.AccessdeniedException: Access is denied

spring-security.xml代码：

<?xml version="1.0" encoding="UTF-8"?> <beans xmlns="www.springframework/schema/beans" xmlns:security="www.springframework/schema/security" xmlns:xsi="www.w3/2001/XMLSchema-instance" xsi:schemaLocation="www.springframework/schema/beans www.springframework/schema/beans/spring-beans.xsd www.springframework/schema/security www.springframework/schema/security/spring-security.xsd"> <!--配置不拦截资源--> <security:http pattern="/login.jsp" security="none" /> <security:http pattern="/failer.jsp" security="none" /> <security:http pattern="/css/**" security="none" /> <security:http pattern="/img/**" security="none" /> <security:http pattern="/plugins/**" security="none" /> <!-- 配置具体规则 auto-config="true" 不用自己编写登录的页面，框架提供默认登录页面 use-expression="false" 是否使用SPEL表达式（没学过） --> <security:http auto-config="true" use-expressions="false"> <!--配置具体拦截规则 pattern="请求路径的规则" access="访问系统的人,必须有ROLE_ROSE的角色"--> <security:intercept-url pattern="/**" access="ROLE_USER,ROLE_ADMIN" /> <!--定义跳转的具体页面--> <security:form-login login-page="/login.jsp" login-processing-url="/login.do" default-target-url="/index.jsp" authentication-failure-url="/failer.jsp" authentication-success-forward-url="/pages/main.jsp" /> <!--关闭跨域请求--> <security:csrf disabled="true"/> <!--退出--> <security:logout invalidate-session="true" logout-url="/logout.do" logout-success-url="/login.jsp" /> </security:http> <!--切换成数据库中的用户名和密码--> <security:authentication-manager> <security:authentication-provider user-service-ref="userService"> <!--配置加密方式 <security:password-encoder ref="passwordEncoder" />--> </security:authentication-provider> </security:authentication-manager> <!--配置加密类--> <bean id="passwordEncoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder" /> </beans>

解决方案： 1.参考了blog.csdn/txd2016_5_11/article/details/86630247之后查看access="ROLE_USER,ROLE_ADMIN"并没有写错 2.后来找到原因是因为如下图：

本文标签： securityspringdeniedAccess