C_SEC_2405 · Question #27
Which code does the authority-check return when a user does NOT have any authorizations for the authorization object checked?
The correct answer is A. 12. Return code 12 is returned by AUTHORITY-CHECK when the user has absolutely no authorizations for the checked authorization object - meaning the object doesn't exist anywhere in the user's assigned profiles or roles. This is distinct from a partial mismatch: the object is simply…
Question
Which code does the authority-check return when a user does NOT have any authorizations for the authorization object checked?
Options
- A12
- B0
- C4
- D16
How the community answered
(38 responses)- A74% (28)
- B8% (3)
- C16% (6)
- D3% (1)
Explanation
Return code 12 is returned by AUTHORITY-CHECK when the user has absolutely no authorizations for the checked authorization object - meaning the object doesn't exist anywhere in the user's assigned profiles or roles. This is distinct from a partial mismatch: the object is simply absent from the user's authorization data entirely.
Why the distractors are wrong:
- B (0): This is the success code - returned when the user does have the required authorization. Opposite of the scenario described.
- C (4): This means the user has the authorization object in their profile, but the specific field values don't match what was checked - so some authorization exists, just not the right one.
- D (16): This indicates no profile is assigned to the user at all - a higher-level failure unrelated to a specific object check.
Memory tip: Think of the codes in escalating severity - 0 (all good), 4 (object found, values wrong), 12 (object not found at all), 16 (no profile whatsoever). The "no authorizations for this object" case lands at 12, between "wrong values" and "no profile."
Topics
Community Discussion
No community discussion yet for this question.