Method handle

src/main/java/cms/security/WebSecurityConfig.java:222–233

(HttpServletRequest request, HttpServletResponse response, AccessDeniedException accessDeniedException)

        return new AccessDeniedHandler(){

            @Override
            public void handle(HttpServletRequest request, HttpServletResponse response, AccessDeniedException accessDeniedException)
                    throws IOException, ServletException {
                if (!response.isCommitted()) {
                    //向Header头写入信息
                    response.setHeader("message", UriUtils.encode(accessDeniedException.getMessage(),"UTF-8"));//不支持中文参数   用UriUtils.encode代替URLEncoder.encode,解决空格转换成+号的问题
                    response.sendError(HttpStatus.FORBIDDEN.value(),//返回403错误
                            HttpStatus.FORBIDDEN.getReasonPhrase());//错误信息

                }

            }

        };
    }