Spring Security Exception and how to handle it.

[sanoprime]

At DefaultStateMachineExecutor.java:232 you are catching Exception (AccessDeniedException), so SMListener is never notified about error (?). Is there any other way of knowing about security error?

[jvalkeal]

Logic is that if security throws that error then transition is denied. Question is what you would like to do with that information? We can potentially add new features if use case is understood.

[sanoprime]

My first thought was to rethrow it to rollback tx - but that was based on wrong understanding how States are created.

The only reason to catch and do anything is for logging (not talking about logger).