Blue Coat Systems Time Clock Proxy SG Manuale Utente

Chapter 4: Property Reference

175

deny.unauthorized( )

The 

deny.unauthorized

 property instructs the ProxySG to issue a challenge (401 Unauthorized or 407 

Proxy authorization required). This indicates to the client that the resource cannot be accessed with 
their current identity, but might be accessible using a different identity. The browsers typically 
respond by bringing up a dialog box so the user can change their identity. (The 

 string appears 

in the challenge page so that if the user cancels, there is some additional help information provided).

Typically, use 

deny( )

 if the policy rule forbids everyone access, but use 

deny.unauthorized

 if the 

policy rule forbids only certain people.

deny.unauthorized

deny.unauthorized(details)

where 

 is a string defining a message to be displayed to the user. The details string may 

contain CPL substitution variables. 

If current policy contains rules that use the 

authenticate() 

or

 authenticate.force( )

 properties, 

the 

deny.unauthorized( )

 property is equivalent to

 exception(authorization_failed)

. If policy 

does not contain any rules that require authentication, 

deny.unauthorized( )

 is equivalent to

 

exception(policy_denied)

.

The identity of the exception being returned can be tested in an 

<Exception>

 layer using 

exception.id=

.

•

Use  in 

<Proxy>

 layers.

•

Applies to HTTP transactions. For other protocols, the property is the equivalent to 

deny( )

.

Conditions:

 exception.id=

Properties: 

deny( )

, 

exception( )

, 

force_deny( )

, 

force_exception( )