@@ -0,0 +1,42 @@
+<?php
+
+namespace ProcessMaker\Events;
+
+use Illuminate\Foundation\Events\Dispatchable;
+use ProcessMaker\Contracts\SecurityLogEventInterface;
+
+class UnauthorizedAccessAttempt implements SecurityLogEventInterface
+{
+    use Dispatchable;
+
+    private array $data;
+
+    /**
+     * Create a new event instance.
+     *
+     */
+    public function __construct()
+    {
+        $this->data = [
+            'url' => [
+                'link' => url()->current(),
+                'label' => url()->current()
+            ]
+        ];
+    }
+
+    public function getChanges(): array
+    {
+        return [];
+    }
+
+    public function getData(): array
+    {
+        return $this->data;
+    }
+
+    public function getEventName(): string
+    {
+        return 'UnauthorizedAccessAttempt';
+    }
+}
@@ -9,7 +9,9 @@
 use Illuminate\Routing\Route;
 use Illuminate\Support\Arr;
 use Illuminate\Support\Facades\App;
+use Illuminate\Support\Facades\Auth;
 use Illuminate\Support\Facades\Route as RouteFacade;
+use ProcessMaker\Events\UnauthorizedAccessAttempt;
 use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
 use Throwable;
 
@@ -47,6 +49,11 @@ public function report(Throwable $exception)
             echo $exception->getFile() . ': Line: ' . $exception->getLine() . "\n";
             echo $exception;
         }
+        if ($exception instanceof \Illuminate\Auth\Access\AuthorizationException) {
+            try {
+                UnauthorizedAccessAttempt::dispatch();
+            } catch (\Exception $e){}
+        }
         parent::report($exception);
     }
 
 
@@ -36,6 +36,9 @@ class EventServiceProvider extends ServiceProvider
         'ProcessMaker\Events\SettingsUpdated' => [
             'ProcessMaker\Listeners\SecurityLogger',
         ],
+        'ProcessMaker\Events\UnauthorizedAccessAttempt' => [
+            'ProcessMaker\Listeners\SecurityLogger',
+        ],
     ];
 
     /**