I think I could have expanded on that. The "riskier" part is about DB access. In most environment, the powers that be will not allow you to touch it (correctly

I think I could have expanded on that. The "riskier" part is about DB access. In most environment, the powers that be will not allow you to touch it (correctly), doing INSERTS/DELETES/ETC. So you can pass through the risk management gate a form-filler robot, while if you ask for direct DB access you'll hear a "no". Anyway, even if you read me associating risk+API, I said "it's less riskier than asking SAP for an API". If your project depends on SAP doing anything, you have a high risk of not happening :p