spring secruity 教程自定义 403 页面

前面一篇文章试验了ROLE_USER,ROLE_ADMIN 不同的权限，当不满足权限的时候，spring security 会出现一个 很丑陋的 403 页面，一点都不友好，所以在很多情况下，需要定制一个 403的页面来显示用户没有权限访问.
原始的 403 页面如下:

为了让程序不显示这么丑陋的页面，先自己定义一个403.jsp页面,比较简陋，美工自己处理

@RequestMapping(value = "/403", method = RequestMethod.GET)
	public String errorpage(ModelMap model) { 
		model.addAttribute("message", "你没有访问权限");
		return "403";
 
	}

package com.yihaomen.accesshandle;

import java.io.IOException;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.springframework.security.access.AccessDeniedException;
import org.springframework.security.web.access.AccessDeniedHandler;
 
public class MyAccessDeniedHandler implements AccessDeniedHandler {
	private String accessDeniedUrl;
 
	public MyAccessDeniedHandler() {
	}
 
	public MyAccessDeniedHandler(String accessDeniedUrl) {
		this.accessDeniedUrl = accessDeniedUrl;
	}
 

	public void handle(HttpServletRequest request,
		HttpServletResponse response,
		AccessDeniedException accessDeniedException) throws IOException,
		ServletException {
 
	   response.sendRedirect(accessDeniedUrl);
	   request.getSession().setAttribute("message","你没有权限访问这个页面!");
 
	}
 
	public String getAccessDeniedUrl() {
		return accessDeniedUrl;
	}
 
	public void setAccessDeniedUrl(String accessDeniedUrl) {
		this.accessDeniedUrl = accessDeniedUrl;
	}
}