.

.eslint/index.js

@@ -0,0 +1,15 @@
+const cds = require("@sap/eslint-plugin-cds");
+
+module.exports = {
+  configs: {
+    recommended: {
+      plugins: ["cloud-cap-samples"],
+      rules: {
+        "cloud-cap-samples/no-open-services": ["error", "show"]
+      }
+    }
+  },
+  rules: {
+    "no-open-services": cds.createRule(require("./rules/no-open-services")),
+  }
+};

.eslint/package.json

@@ -0,0 +1,5 @@
+{
+    "name": "eslint-plugin-cloud-cap-samples",
+    "description": "Contains shareable custom lint rules for this repository",
+    "version": "1.0.0"
+}

.eslint/rules/no-open-services.js

@@ -0,0 +1,29 @@
+module.exports = {
+    meta: {
+      docs: {
+        description: "Service without `@requires/restrict` should not expose fields with personal data.",
+        version: "1.0.0"
+      },
+      fixable: "code",
+      model: "inferred"
+    },
+    create: function (context) {
+      const services = context.getModel() ? context.getModel().services : [];
+      const unprotectedServices = services.filter(s => !s["@requires"] && !s["@restrict"]).map(s => s.name)
+      return { entity: checkForExposedFields };
+
+      function checkForExposedFields(entity) {
+        const entityInUnprotectedService = unprotectedServices.some(service => entity.name.includes(service))
+        if (entityInUnprotectedService) {
+          const elements = Object.keys(entity.elements).filter((name) => ["createdBy", "modifiedBy"].includes(name))
+          for (let element of elements) {
+            context.report({
+              message: `Field '${element}' in '${entity.name}' exposes personal data. Remove field or add \`@restrict/requires\`.`,
+              node: context.getNode(entity),
+              file: entity.$location.file
+            })
+          }
+        }
+      }
+    }
+  }

.eslintrc

@@ -1,7 +1,11 @@
 {
     "extends": [
         "eslint:recommended",
-        "plugin:@sap/cds/recommended"
+        "plugin:@sap/cds/recommended",
+        "plugin:cloud-cap-samples/recommended"
+    ],
+    "plugins": [
+        "cloud-cap-samples"
     ],
     "env": {
         "browser": true,
@@ -23,7 +27,7 @@
     "rules": {
         "no-console": "off",
         "require-atomic-updates": "off",
-        "require-await":"warn",
+        "require-await": "warn",
         "no-unused-vars": ["warn", { "argsIgnorePattern": "_" }]
     }
 }

.vscode/settings.json

@@ -24,4 +24,4 @@
     "tsv",
     "tab"
   ],
-}
+}

package.json

@@ -24,8 +24,11 @@
     "chai": "^4.3.4",
     "chai-as-promised": "^7.1.1",
     "chai-subset": "^1.6.0",
+    "eslint": "^8.9",
     "semver": "^7",
-    "sqlite3": "^5"
+    "sqlite3": "^5",
+    "@sap/eslint-plugin-cds": "^2.6.0",
+    "eslint-plugin-cloud-cap-samples": "file:.eslint"
   },
   "scripts": {
     "cleanup": "rm -rf node_modules && rm -rf */node_modules && rm -rf */*/node_modules",