Security & Robustness (16 Rules)

Authorizations, dynamic execution sanitation, error handling, and runtime safety.

Category Overview

This category enforces 16 native ATC rules adhering to SAP Clean ABAP and ABAP Cloud standards. Each check executes natively inside Eclipse ADT and SAP GUI.

Rules in this Category

Rule Name	Native ATC Class	Suppression Tag	Automated QuickFix
Avoid Directly Modifying System Fields (sy-subrc, sy-tabix)	`ZCL_SKYLINT_NO_SY_MODIFY`	`#EC NO_SY_MODIFY`	-
Avoid Native ASSERT in Production Code (Prevent Unrecoverable Dumps)	`ZCL_SKYLINT_NO_PROD_ASSERT`	`#EC NO_PROD_ASSERT`	-
Avoid Explicit RAISE SHORTDUMP in Application Logic	`ZCL_SKYLINT_NO_RAISE_SHORTDUMP`	`#EC NO_RAISE_SHORTDUMP`	-
Avoid Dynamic Metaprogramming and Code Generation (Remote Code Execution Risk)	`ZCL_SKYLINT_NO_METAPROGRAMMING`	`#EC NO_METAPROGRAMMING`	-
Avoid Kernel and Native Database Calls (SYSTEM-CALL, EXEC SQL)	`ZCL_SKYLINT_NO_KERNEL_CALL`	`#EC NO_KERNEL_CALL`	-
Ensure AUTHORITY-CHECK Precedes Sensitive Business Operations	`ZCL_SKYLINT_PREF_AUTH_CHECK`	`#EC PREF_AUTH_CHECK`	⚡ Ready
Avoid Catching Generic CX_ROOT (Catch Specific Exceptions)	`ZCL_SKYLINT_NO_CATCH_ROOT`	`#EC NO_CATCH_ROOT`	-
Avoid Raising System Exceptions Directly (CX_SY_*)	`ZCL_SKYLINT_NO_RAISE_CX_SY`	`#EC NO_RAISE_CX_SY`	-
Check sy-subrc Promptly After AUTHORITY-CHECK (CWE-862 Authorization Bypass)	`ZCL_SKYLINT_PREF_AUTH_SUBRC`	`#EC PREF_AUTH_SUBRC`	-
Avoid CLIENT SPECIFIED / USING CLIENT in Cloud (Multi-Tenant Isolation)	`ZCL_SKYLINT_NO_CLIENT_SPEC`	`#EC NO_CLIENT_SPEC`	⚡ Ready
Handle System and Communication Failures in Remote Function Calls (RFC)	`ZCL_SKYLINT_NO_RFC_ERR`	`#EC NO_RFC_ERR`	-
Only Modify Tables Defined in Your Own Package/Component	`ZCL_SKYLINT_NO_MOD_STD_TABLE`	`#EC NO_MOD_STD_TABLE`	-
Avoid Unnecessary Dynamic Programming Constructs (SQL Injection Prevention)	`ZCL_SKYLINT_NO_DYNAMIC_STMT`	`#EC NO_DYNAMIC_STMT`	-
Avoid Hardcoding System & Tenant Environment Checks (sy-sysid, sy-mandt)	`ZCL_SKYLINT_NO_HARDCODED_ENV`	`#EC NO_HARDCODED_ENV`	-
Avoid UPDATE or DELETE Without a WHERE Condition (Catastrophic Data Wipe Prevention)	`ZCL_SKYLINT_NO_UNFILT_DML`	`#EC NO_UNFILT_DML`	-
Provide FAILED and REPORTED in RAP EML Statements (Silent Transaction Failure Prevention)	`ZCL_SKYLINT_NO_UNHANDLED_EML`	`#EC NO_UNHANDLED_EML`	-

← Back to All Rules Catalog

Security & Robustness (16 Rules) ​

Rules in this Category ​

Security & Robustness (16 Rules)

Rules in this Category