[Flow] Handle "no access" / 403 forbidden

[Cornel Widmer]

I'm getting into the security framework of Flow and started to play around with. As far authentification works very well and also some Acls are included.

One user has no rights to access a given controller and so the typical flow error message appears on the screen (Access denied (0 denied, 0 granted, 1 abstained)).

What is a good practice to handle such an error?

For an user its not very helpful to see this error-message so I want to redirect him to a own page with more informations and my own styleguide. Whats a proper way to achive that?