Challenge 1 / 1

Our edit() action uses #[IsGranted('edit', subject: 'starship', statusCode: 404)]. What does the 404 buy us over the default 403?

The voter is skipped entirely, so unauthorized requests cost less work.

A 404 response is cacheable, so repeated unauthorized requests never hit the app.

Symfony logs 403s as security incidents, while 404s stay out of the log.

A 403 confirms the starship exists - a 404 keeps even its existence private.