error access through SAST