Only Modify Tables Defined in Your Own Package/Component
WarningSecurity & Robustness#EC OWN_TABLESRemote Enabled
Overview
Modify Only Own Database Tables.
ATC Finding Message:
Modify only customer-owned database tables (see OWN_TABLES)
Rationale
Writing directly to tables owned by another application component bypasses its validations, change documents, and authorization logic. It also creates an undocumented dependency that can break when the owning component evolves. Modify only tables in your own package and use released APIs for foreign data.
Non-Compliant
abap
UPDATE mara SET matnr = @lv_matnr WHERE matnr = @lv_old_matnr.Compliant
abap
UPDATE zmara SET matnr = @lv_matnr WHERE matnr = @lv_old_matnr.Configuration & Thresholds
This check can be fine-tuned directly in the ATC Check Variant Editor (CHKV) in Eclipse ADT:
| Parameter Name | Data Type | Default Value |
|---|---|---|
OWN_TABLES | String | ^[yz/] |
REPORT_DYNAMIC | Boolean | true |
Suppression
To suppress findings for this rule, append the pseudo-comment to the statement:
abap
" Standard pseudo-comment:
... "#EC OWN_TABLES
" SAP CI_ prefix format:
... "#EC CI_OWN_TABLESTechnical Details
- Native ATC Class:
ZCL_SKYLINT_NO_MOD_STD_TABLE - Implementation File: zcl_skylint_no_mod_std_table.clas.abap