WEEK4CHALLENGE maheshkumar.palavalli

cap/app/package.json

@@ -0,0 +1,9 @@
+{
+ "name": "approuter",
+ "dependencies": {
+  "@sap/approuter": "^8"
+ },
+ "scripts": {
+  "start": "node node_modules/@sap/approuter/approuter.js"
+ }
+}

cap/app/xs-app.json

@@ -0,0 +1,6 @@
+{
+  "routes": [{
+ "source": "^/(.*)",
+ "destination": "srv_api"
+ }]
+}

cap/db/data-model.cds

@@ -4,4 +4,5 @@ entity Books {
   key ID : Integer;
   title  : String;
   stock  : Integer;
+  createdBy : String(255)  @cds.on.insert : $user;
 }

cap/db/data/my.bookshop-Books.csv

@@ -1,3 +1,3 @@
-ID;title;stock
-1;Wuthering Heights;100
-2;Jane Eyre;500
+ID;title;stock;createdBy
+1;Wuthering Heights;100;p.maheshkumarreddy@gmail.com
+2;Jane Eyre;500;viola@gmail.com

cap/package.json

@@ -1,54 +1,66 @@
 {
-    "name": "cap",
-    "version": "1.0.0",
-    "description": "A simple CAP project.",
-    "repository": "<Add your repository here>",
-    "license": "UNLICENSED",
-    "private": true,
-    "dependencies": {
-        "@sap/cds": "^5.5.4",
-        "express": "^4",
-        "hdb": "^0.19"
+  "name": "cap",
+  "version": "1.0.0",
+  "description": "A simple CAP project.",
+  "repository": "<Add your repository here>",
+  "license": "UNLICENSED",
+  "private": true,
+  "dependencies": {
+    "@sap/cds": "^5.5.4",
+    "@sap/xssec": "^3.2.10",
+    "cors": "^2.8.5",
+    "express": "^4",
+    "helmet": "^4.6.0",
+    "hdb": "^0.19",
+    "passport": "^0.5.0"
+  },
+  "devDependencies": {
+    "sqlite3": "^5.0.2"
+  },
+  "scripts": {
+    "start": "cds run"
+  },
+  "eslintConfig": {
+    "extends": "eslint:recommended",
+    "env": {
+      "es2020": true,
+      "node": true,
+      "jest": true,
+      "mocha": true
     },
-    "devDependencies": {
-        "sqlite3": "^5.0.2"
+    "globals": {
+      "SELECT": true,
+      "INSERT": true,
+      "UPDATE": true,
+      "DELETE": true,
+      "CREATE": true,
+      "DROP": true,
+      "CDL": true,
+      "CQL": true,
+      "CXL": true,
+      "cds": true
     },
-    "scripts": {
-        "start": "cds run"
-    },
-    "eslintConfig": {
-        "extends": "eslint:recommended",
-        "env": {
-            "es2020": true,
-            "node": true,
-            "jest": true,
-            "mocha": true
-        },
-        "globals": {
-            "SELECT": true,
-            "INSERT": true,
-            "UPDATE": true,
-            "DELETE": true,
-            "CREATE": true,
-            "DROP": true,
-            "CDL": true,
-            "CQL": true,
-            "CXL": true,
-            "cds": true
-        },
-        "rules": {
-            "no-console": "off",
-            "require-atomic-updates": "off"
+    "rules": {
+      "no-console": "off",
+      "require-atomic-updates": "off"
+    }
+  },
+  "cds": {
+    "requires": {
+      "db": {
+        "kind": "sql",
+        "credentials": {
+          "database": "test.db"
         }
-    },
-    "cds": {
-        "requires": {
-            "db": {
-                "kind": "sql"
-            }
-        },
-        "hana": {
-            "deploy-format": "hdbtable"
+      },
+      "auth": {
+        "[development]": {
+          "kind": "xsuaa-auth"
         }
+      }
+    },
+    "hana": {
+      "deploy-format": "hdbtable"
     }
+  }
 }

cap/srv/cat-service.cds

@@ -1,5 +1,10 @@
 using my.bookshop as my from '../db/data-model';
 
 service CatalogService {
-    @readonly entity Books as projection on my.Books;
-}
+     @readonly entity Books as projection on my.Books;
+}
+
+annotate CatalogService.Books @(restrict:[
+        { grant: 'READ', to: 'Auditor' },
+        { grant: ['READ', 'WRITE'], to: 'User', where: 'createdBy = $user' }
+    ] );

cap/srv/server.js

@@ -1,6 +1,16 @@
 const cds = require ('@sap/cds')
 cds.on('bootstrap', (app) => {
-
+    const helmet = require ('helmet')
+    const cors = require('cors');
+    app.use(cors());
+    app.use(helmet({
+    contentSecurityPolicy: {
+      directives: {
+        ...helmet.contentSecurityPolicy.getDefaultDirectives(),
+        // custom settings
+      }
+    }
+  }))
 })
 
 module.exports = cds.server