Authorization interview question
Should an unauthorized request for a resource return 403 or 404?
The answer is available to members. Create a free account to see every answer, track which questions you're confident about and practise with timed mock interviews.
More most-asked Authorization questions
- Compare RBAC, ABAC and ReBAC authorization models.
- What is IDOR (Insecure Direct Object Reference) and how do you prevent it?
- What is the principle of least privilege and how do you apply it?
- Where should authorization checks live in an application?
- How do you enforce tenant isolation in a multi-tenant SaaS?