code: @Override
      public void handle(RequestContext context, AccessDeniedException e) throws SecurityProviderException, IOException {
          saveException(context, e);
  
          if (StringUtils.isNotEmpty(getErrorPageUrl())) {
              forwardToErrorPage(context);
          } else {
              sendError(e, context);
          }
      }
docs: Forwards to the error page, but if not error page was specified, a 403 error is sent.
  
  @param context the request context
  @param e       the exception with the reason of the access deny