@ControllerAdvice

public class RestResponseEntityExceptionHandler 

  extends ResponseEntityExceptionHandler {

​

    @ExceptionHandler({ AccessDeniedException.class })

    public ResponseEntity<Object> handleAccessDeniedException(

      Exception ex, WebRequest request) {

        return new ResponseEntity<Object>(

          "Access denied message here", new HttpHeaders(), HttpStatus.FORBIDDEN);

    }

    ...

}

Copy