Spring Security blocks authorized user who has not required role. This situation can't handle using @ExceptionHandler but Spring Boot handles. This is such situation example code.