security constraint returns