SAP-samples/cloud-cap-samples-java

10 errors, 39 warningsmain

49 issues need attention.

10 errors and 39 warnings in the paths between 38 routes and 36 tables.

ROUTE FINDINGS10 of 38 · 7/7 rules

ROUTES: 38
TABLES: 36
FILES READ: 36
RULES RUN: 7/7

49 findings

GET notes/Notes can reach Notes without authenticating.
auth-before-dataGET notes/Notes → Notes
POST notes/Notes can reach Notes without authenticating.
auth-before-dataPOST notes/Notes → Notes
PATCH notes/Notes can reach Notes without authenticating.
auth-before-dataPATCH notes/Notes → Notes
DELETE notes/Notes can reach Notes without authenticating.
auth-before-dataDELETE notes/Notes → Notes
GET review/Reviews can reach Reviews without authenticating.
auth-before-dataGET review/Reviews → Reviews
POST review/Reviews can reach Reviews without authenticating.
auth-before-dataPOST review/Reviews → Reviews
PATCH review/Reviews can reach Reviews without authenticating.
auth-before-dataPATCH review/Reviews → Reviews
DELETE review/Reviews can reach Reviews without authenticating.
auth-before-dataDELETE review/Reviews → Reviews
GET review/Books can reach Books without authenticating.
auth-before-dataGET review/Books → Books
GET review/Authors can reach Authors without authenticating.
auth-before-dataGET review/Authors → Authors
GET notes/Notes has no validator or rate limiter attached.
public-entry-guarded
POST notes/Notes has no validator or rate limiter attached.
public-entry-guarded
PATCH notes/Notes has no validator or rate limiter attached.
public-entry-guarded
DELETE notes/Notes has no validator or rate limiter attached.
public-entry-guarded
GET review/Reviews has no validator or rate limiter attached.
public-entry-guarded
POST review/Reviews has no validator or rate limiter attached.
public-entry-guarded
PATCH review/Reviews has no validator or rate limiter attached.
public-entry-guarded
DELETE review/Reviews has no validator or rate limiter attached.
public-entry-guarded
GET review/Books has no validator or rate limiter attached.
public-entry-guarded
GET review/Authors has no validator or rate limiter attached.
public-entry-guarded
OrderItems is not connected to anything.
no-orphan-datastore
A_AddressEmailAddress is not connected to anything.
no-orphan-datastore
A_AddressFaxNumber is not connected to anything.
no-orphan-datastore
A_AddressHomePageURL is not connected to anything.
no-orphan-datastore
A_AddressPhoneNumber is not connected to anything.
no-orphan-datastore
A_BPContactToAddress is not connected to anything.
no-orphan-datastore
A_BPContactToFuncAndDept is not connected to anything.
no-orphan-datastore
A_BuPaAddressUsage is not connected to anything.
no-orphan-datastore
A_BuPaIdentification is not connected to anything.
no-orphan-datastore
A_BuPaIndustry is not connected to anything.
no-orphan-datastore
A_BusinessPartner is not connected to anything.
no-orphan-datastore
A_BusinessPartnerAddress is not connected to anything.
no-orphan-datastore
A_BusinessPartnerBank is not connected to anything.
no-orphan-datastore
A_BusinessPartnerContact is not connected to anything.
no-orphan-datastore
A_BusinessPartnerRole is not connected to anything.
no-orphan-datastore
A_BusinessPartnerTaxNumber is not connected to anything.
no-orphan-datastore
A_Customer is not connected to anything.
no-orphan-datastore
A_CustomerCompany is not connected to anything.
no-orphan-datastore
A_CustomerDunning is not connected to anything.
no-orphan-datastore
A_CustomerSalesArea is not connected to anything.
no-orphan-datastore
A_CustomerSalesAreaTax is not connected to anything.
no-orphan-datastore
A_CustomerWithHoldingTax is not connected to anything.
no-orphan-datastore
A_CustSalesPartnerFunc is not connected to anything.
no-orphan-datastore
A_Supplier is not connected to anything.
no-orphan-datastore
A_SupplierCompany is not connected to anything.
no-orphan-datastore
A_SupplierDunning is not connected to anything.
no-orphan-datastore
A_SupplierPartnerFunc is not connected to anything.
no-orphan-datastore
A_SupplierPurchasingOrg is not connected to anything.
no-orphan-datastore
A_SupplierWithHoldingTax is not connected to anything.
no-orphan-datastore

Part of this repository was not read, so this report is incomplete. Unread: srv/external/API_BUSINESS_PARTNER.cds, srv/external/API_BUSINESS_PARTNER.cds, srv/external/API_BUSINESS_PARTNER.cds.

Free account, no card. The repository opens as an editable graph.

Add this check to the README

[![wyro architecture](https://wyro.in/api/badge/SAP-samples/cloud-cap-samples-java)](https://wyro.in/scan/SAP-samples/cloud-cap-samples-java)

It updates itself whenever the repository changes and links back to this report.

What this is

Wyro reads the repository’s routes and data models and checks the paths between them: whether a route can reach a table without passing a guard, whether a datastore holding personal data is exposed to a public read, whether an endpoint that issues credentials requires the credentials it issues.

It is rule-based, not a model. The same commit produces the same result every time, and it does not guess at business rules it cannot see. A rule with nothing to look at is reported as not having run — never as a pass.

Create a free account Check repos in your browser

This check runs on public source through GitHub’s own API and needs no account. A free account adds the editable architecture canvas, private repositories on paid plans, and a CI gate. No card required.