Chapter 4: Property Reference
force_deny( )
The force_deny( ) property is similar to deny( ) except that it:
•Cannot be overridden by an allow.
•Overrides any pending termination (that is, if a deny( ) has already been matched, and a force_deny or force_exception is subsequently matched, the latter commits.
•Commits immediately (that is, the first one matched applies).
The force_deny( ) property is equivalent to force_exception(policy_denied).
Syntax
force_deny
force_deny(details)
where details is a text string that will be substituted for $(exception.details) within the policy_denied exception. The details string may also contain CPL substitution patterns.
Layer and Transaction Notes
•Use in <Cache>, <Proxy>, and <Admin> layers.
•Do not use in <Forward> layers.
•Applies to all transactions.
See Also
•Conditions: exception.id=
•Properties: deny(), force_exception()
181
