报错情况如下：

在登录的时候报错，如下：

org.springframework.security.access.AccessDeniedException: Access is denied

spring-security.xml代码：

<?xml version="1.0" encoding="UTF-8"?>
<beans xmlns="http://www.springframework/schema/beans"
       xmlns:security="http://www.springframework/schema/security"
       xmlns:xsi="http://www.w3/2001/XMLSchema-instance"
       xsi:schemaLocation="http://www.springframework/schema/beans
    http://www.springframework/schema/beans/spring-beans.xsd
    http://www.springframework/schema/security
    http://www.springframework/schema/security/spring-security.xsd">

    <!--配置不拦截资源-->
    <security:http pattern="/login.jsp" security="none" />
    <security:http pattern="/failer.jsp" security="none" />
    <security:http pattern="/css/**" security="none" />
    <security:http pattern="/img/**" security="none" />
    <security:http pattern="/plugins/**" security="none" />


    <!--
        配置具体规则
        auto-config="true" 不用自己编写登录的页面，框架提供默认登录页面
        use-expression="false" 是否使用SPEL表达式（没学过）
    -->
    <security:http auto-config="true" use-expressions="false">
        <!--配置具体拦截规则 pattern="请求路径的规则" access="访问系统的人,必须有ROLE_ROSE的角色"-->
        <security:intercept-url pattern="/**" access="ROLE_USER,ROLE_ADMIN" />

        <!--定义跳转的具体页面-->
        <security:form-login
            login-page="/login.jsp"
            login-processing-url="/login.do"
            default-target-url="/index.jsp"
            authentication-failure-url="/failer.jsp"
            authentication-success-forward-url="/pages/main.jsp"
        />
        <!--关闭跨域请求-->
        <security:csrf disabled="true"/>
        <!--退出-->
        <security:logout invalidate-session="true" logout-url="/logout.do" logout-success-url="/login.jsp" />
    </security:http>

    <!--切换成数据库中的用户名和密码-->
    <security:authentication-manager>
        <security:authentication-provider user-service-ref="userService">
            <!--配置加密方式
            <security:password-encoder ref="passwordEncoder" />-->
        </security:authentication-provider>
    </security:authentication-manager>

    <!--配置加密类-->
    <bean id="passwordEncoder" class="org.springframework.security.crypto.bcrypt.BCryptPasswordEncoder" />
</beans>

解决方案：
1.参考了https://blog.csdn/txd2016_5_11/article/details/86630247之后查看access="ROLE_USER,ROLE_ADMIN"并没有写错
2.后来找到原因是因为如下图：

更多推荐

Spring Security出现问题：Access is denied