Chapter 4: Property Reference
181
force_deny( )
The force_deny( ) property is similar to deny( ) except that it:
• Cannot be overridden by an allow.
• Overrides any pending termination (that is, if a
deny( ) has already been matched, and a
force_deny or force_exception is subsequently matched, the latter commits.
• Commits immediately (that is, the first one matched applies).
The
force_deny( ) property is equivalent to force_exception(policy_denied).
Syntax
force_deny
force_deny(details)
where details
is a text string that will be substituted for $(exception.details) within the
policy_denied exception. The details string may also contain CPL substitution patterns.
Layer and Transaction Notes
•Use in
<Cache>, <Proxy>, and <Admin> layers.
•Do not use in
<Forward> layers.
• Applies to all transactions.
See Also
• Conditions:
exception.id=
•Properties: deny(), force_exception()