code: protected Resolution handleAccessDenied(ActionBean bean, Method handler)
  	{
  		Resolution resolution;
  		if (securityManager instanceof SecurityHandler)
  		{
  			resolution = ((SecurityHandler)securityManager).handleAccessDenied(bean, handler);
  		}
  		else
  		{
  			resolution = new ErrorResolution(HttpServletResponse.SC_UNAUTHORIZED);
  		}
  		return resolution;
  	}
docs: Determine what to do when access has been denied. If the SecurityManager implements the optional interface
  [@Link SecurityHandler}, ask the SecurityManager. Otherwise, return the HTTP error "forbidden".
  
  @param bean    the action bean to which access was denied
  @param handler the event handler to which access was denied
  @return the Resolution to be executed when access has been denied