| Previous | Next |
| E_BLUETOOTH_ATT_INVALID_OFFSET | E_BLUETOOTH_ATT_PREPARE_QUEUE_FULL |
E_BLUETOOTH_ATT_INSUFFICIENT_AUTHORIZATION
Authorization is a server policy decision
E_BLUETOOTH_ATT_INSUFFICIENT_AUTHORIZATION maps ATT error 0x08. Authentication establishes who the peer is with a particular level of assurance; authorization decides whether that peer may perform the requested operation. A fully encrypted and authenticated link can still be denied by application policy.
Examples include a device that accepts configuration only from an enrolled controller, a server that requires local user approval, or an attribute gated by the current operating mode. Re-pairing is useful only if the denial is caused by the wrong bonded identity, not when the policy intentionally rejects that identity.
Evidence to collect from both sides
- Record the bonded peer identity and the operation being authorized.
- Inspect peripheral logs or application callbacks that make the authorization decision.
- Check enrollment, ownership, role, and physical-presence requirements defined by the product.
- Do not substitute stronger encryption for an unmet application permission.
References
- Bluetooth Core: Insufficient Authorization
- Bluetooth Core: attribute permissions
- Zephyr: application-controlled GATT access
Looking for a different code? Search another status or error code.