SAP-samples/xsa-cap-migration

0 errors, 163 warningsmain

163 issues need attention.

163 warnings in the paths between 158 routes and 5 tables.

ROUTE FINDINGS158 of 158 · 7/7 rules
ROUTES
158
TABLES
5
FILES READ
120
RULES RUN
7/7

163 findings

  • POST /odata/v4/shine/poCreate has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/poDelete has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/poApprove has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/soCreateMultiple has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/addKeys has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/getSalesAnalysis has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/replicateTimebasedPO has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/createjobschedule has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/downloadExcel has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/downloadZip has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/getFilter has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/getTotalOrders has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/getSessionInfo has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/getKeys has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/getBPTransactionData has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/getAllBusinessPartnersData has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/getBPSalesData has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/getUserSessionInfo has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/getDBTableSize has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/replicateSales has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/replicatePurchase has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetSOHeader has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetSOItem has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetPOHeader has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetPOItem has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetAddresses has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetEmployees has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetPartners has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetProducts has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetConstants has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetTexts has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetNotes has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/resetAttachments has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/jobCreate has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/deletejobdata has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/deletejobschedules has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/generateTimeData has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/checkTimeData has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/sales has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/sales has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH /odata/v4/shine/sales has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /odata/v4/shine/sales has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/SalesChartData has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/SalesChartData has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH /odata/v4/shine/SalesChartData has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /odata/v4/shine/SalesChartData has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/SalesByRegion has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/SalesByRegion has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH /odata/v4/shine/SalesByRegion has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /odata/v4/shine/SalesByRegion has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/SalesByCountry has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/SalesByCountry has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH /odata/v4/shine/SalesByCountry has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /odata/v4/shine/SalesByCountry has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/SalesByProduct has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/SalesByProduct has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH /odata/v4/shine/SalesByProduct has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /odata/v4/shine/SalesByProduct has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/salesRank has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/salesRank has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH /odata/v4/shine/salesRank has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /odata/v4/shine/salesRank has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/Buyer has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/Buyer has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH /odata/v4/shine/Buyer has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /odata/v4/shine/Buyer has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/SalesOrderItem has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/SalesOrderItem has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH /odata/v4/shine/SalesOrderItem has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /odata/v4/shine/SalesOrderItem has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/SalesOrderHeader has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/SalesOrderHeader has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH /odata/v4/shine/SalesOrderHeader has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /odata/v4/shine/SalesOrderHeader has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/ProductRegionQuantity has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/ProductRegionQuantity has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH /odata/v4/shine/ProductRegionQuantity has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /odata/v4/shine/ProductRegionQuantity has no validator or rate limiter attached.

    public-entry-guarded

  • GET /odata/v4/shine/ProductSales has no validator or rate limiter attached.

    public-entry-guarded

  • POST /odata/v4/shine/ProductSales has no validator or rate limiter attached.

    public-entry-guarded

  • PATCH /odata/v4/shine/ProductSales has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /odata/v4/shine/ProductSales has no validator or rate limiter attached.

    public-entry-guarded

  • GET / has no validator or rate limiter attached.

    public-entry-guarded

  • GET /constants has no validator or rate limiter attached.

    public-entry-guarded

  • GET /blockScoped has no validator or rate limiter attached.

    public-entry-guarded

  • GET /parameterDefaults has no validator or rate limiter attached.

    public-entry-guarded

  • GET /parameterMultiple has no validator or rate limiter attached.

    public-entry-guarded

  • GET /unicode has no validator or rate limiter attached.

    public-entry-guarded

  • GET /classes1 has no validator or rate limiter attached.

    public-entry-guarded

  • GET /classes1Error has no validator or rate limiter attached.

    public-entry-guarded

  • GET /classes2a has no validator or rate limiter attached.

    public-entry-guarded

  • GET /classes2b has no validator or rate limiter attached.

    public-entry-guarded

  • GET /classes3a has no validator or rate limiter attached.

    public-entry-guarded

  • GET /classes3b has no validator or rate limiter attached.

    public-entry-guarded

  • GET /classes4a has no validator or rate limiter attached.

    public-entry-guarded

  • GET /classes4b has no validator or rate limiter attached.

    public-entry-guarded

  • GET /numFormat has no validator or rate limiter attached.

    public-entry-guarded

  • GET /currFormat has no validator or rate limiter attached.

    public-entry-guarded

  • GET /dateFormat has no validator or rate limiter attached.

    public-entry-guarded

  • POST /createJobSchedule has no validator or rate limiter attached.

    public-entry-guarded

  • GET /getJobSchedules has no validator or rate limiter attached.

    public-entry-guarded

  • GET /getJobSchedulesByName/:name has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /deleteJobSchedules/:jobid has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /deleteData has no validator or rate limiter attached.

    public-entry-guarded

  • GET /getJobsCount has no validator or rate limiter attached.

    public-entry-guarded

  • GET /getAllJobs has no validator or rate limiter attached.

    public-entry-guarded

  • GET /getJobsByName/:name has no validator or rate limiter attached.

    public-entry-guarded

  • GET /example1 has no validator or rate limiter attached.

    public-entry-guarded

  • GET /example2 has no validator or rate limiter attached.

    public-entry-guarded

  • GET /example3 has no validator or rate limiter attached.

    public-entry-guarded

  • GET /example4/:partnerRole? has no validator or rate limiter attached.

    public-entry-guarded

  • GET /example5/ has no validator or rate limiter attached.

    public-entry-guarded

  • GET /whoAmI has no validator or rate limiter attached.

    public-entry-guarded

  • GET /products has no validator or rate limiter attached.

    public-entry-guarded

  • GET /hdb has no validator or rate limiter attached.

    public-entry-guarded

  • GET /os has no validator or rate limiter attached.

    public-entry-guarded

  • GET /user1 has no validator or rate limiter attached.

    public-entry-guarded

  • POST /soheader has no validator or rate limiter attached.

    public-entry-guarded

  • POST /soitem has no validator or rate limiter attached.

    public-entry-guarded

  • POST /poheader has no validator or rate limiter attached.

    public-entry-guarded

  • POST /poitem has no validator or rate limiter attached.

    public-entry-guarded

  • POST /addresses has no validator or rate limiter attached.

    public-entry-guarded

  • POST /partners has no validator or rate limiter attached.

    public-entry-guarded

  • POST /employees has no validator or rate limiter attached.

    public-entry-guarded

  • POST /products has no validator or rate limiter attached.

    public-entry-guarded

  • POST /constants has no validator or rate limiter attached.

    public-entry-guarded

  • POST /texts has no validator or rate limiter attached.

    public-entry-guarded

  • POST /notes has no validator or rate limiter attached.

    public-entry-guarded

  • POST /attachments has no validator or rate limiter attached.

    public-entry-guarded

  • GET /zipPO has no validator or rate limiter attached.

    public-entry-guarded

  • GET /tablesize has no validator or rate limiter attached.

    public-entry-guarded

  • GET /tablesize1 has no validator or rate limiter attached.

    public-entry-guarded

  • GET /sessioninfo has no validator or rate limiter attached.

    public-entry-guarded

  • GET /download has no validator or rate limiter attached.

    public-entry-guarded

  • GET /downloadPO has no validator or rate limiter attached.

    public-entry-guarded

  • GET /actions/getcsrftoken/ has no validator or rate limiter attached.

    public-entry-guarded

  • POST /variants/ has no validator or rate limiter attached.

    public-entry-guarded

  • PUT /variants/:fileName has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /variants/:fileName has no validator or rate limiter attached.

    public-entry-guarded

  • POST /changes/ has no validator or rate limiter attached.

    public-entry-guarded

  • GET /flex/data/:app? has no validator or rate limiter attached.

    public-entry-guarded

  • GET /promises has no validator or rate limiter attached.

    public-entry-guarded

  • GET /promisesError has no validator or rate limiter attached.

    public-entry-guarded

  • GET /promisesDB1 has no validator or rate limiter attached.

    public-entry-guarded

  • GET /promisesDB2 has no validator or rate limiter attached.

    public-entry-guarded

  • POST /timebasedPO has no validator or rate limiter attached.

    public-entry-guarded

  • POST /sales has no validator or rate limiter attached.

    public-entry-guarded

  • POST /purchase has no validator or rate limiter attached.

    public-entry-guarded

  • POST /create has no validator or rate limiter attached.

    public-entry-guarded

  • GET /:target/:artifact has no validator or rate limiter attached.

    public-entry-guarded

  • POST /:key? has no validator or rate limiter attached.

    public-entry-guarded

  • GET /:key? has no validator or rate limiter attached.

    public-entry-guarded

  • DELETE /:key? has no validator or rate limiter attached.

    public-entry-guarded

  • GET /dates has no validator or rate limiter attached.

    public-entry-guarded

  • GET /array has no validator or rate limiter attached.

    public-entry-guarded

  • GET /json has no validator or rate limiter attached.

    public-entry-guarded

  • GET /objects has no validator or rate limiter attached.

    public-entry-guarded

  • GET /strings has no validator or rate limiter attached.

    public-entry-guarded

  • SHINE_TIME_DIM is not connected to anything.

    no-orphan-datastore

  • errors is not connected to anything.

    no-orphan-datastore

  • messages is not connected to anything.

    no-orphan-datastore

  • User is not connected to anything.

    no-orphan-datastore

  • Employeescheck is not connected to anything.

    no-orphan-datastore

Part of this repository was not read, so this report is incomplete. Read 120 of 266 files, schemas and routes first. Point Wyro at a single service directory to read one in full. Unread: hana-shine-cap/srv/actions.cds, hana-shine-cap/srv/actions.cds, hana-shine-cap/srv/actions.cds.

Free account, no card. The repository opens as an editable graph.

Add this check to the README

wyro architecture badge
[![wyro architecture](https://wyro.in/api/badge/SAP-samples/xsa-cap-migration)](https://wyro.in/scan/SAP-samples/xsa-cap-migration)

It updates itself whenever the repository changes and links back to this report.

What this is

Wyro reads the repository’s routes and data models and checks the paths between them: whether a route can reach a table without passing a guard, whether a datastore holding personal data is exposed to a public read, whether an endpoint that issues credentials requires the credentials it issues.

It is rule-based, not a model. The same commit produces the same result every time, and it does not guess at business rules it cannot see. A rule with nothing to look at is reported as not having run — never as a pass.

This check runs on public source through GitHub’s own API and needs no account. A free account adds the editable architecture canvas, private repositories on paid plans, and a CI gate. No card required.