[jboss-user] [JBoss Web Services] - EJBAccessException leads to HTTP status code 500

Leo Breuss do-not-reply at jboss.com
Tue Aug 28 20:46:10 EDT 2012

Leo Breuss [https://community.jboss.org/people/lbreuss] created the discussion

"EJBAccessException leads to HTTP status code 500"

To view the discussion, visit: https://community.jboss.org/message/756623#756623


My web service client (e.g. soapUI) receives a HTTP status code 500 when the authenticated user is not authorized to call a method on an EJB (the user is lacking the required role). 

I would have expected a 4xx code, e.g. 403 Forbidden (or 403 Method Not Allowed). IMHO, 500 Internal Server error is not appropriate in that case. 

Am I to catch the exception and transform it to a 403 response? How would I do that?


Reply to this message by going to Community

Start a new discussion in JBoss Web Services at Community

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/jboss-user/attachments/20120828/f9a95419/attachment-0001.html 

More information about the jboss-user mailing list