[Fix] :: security config fix

Team-C0nnect · May 9, 2024 · 174a9b9 · 174a9b9
1 parent 56e007b
commit 174a9b9
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/main/java/com/project/qvick/global/config/SecurityConfig.java b/src/main/java/com/project/qvick/global/config/SecurityConfig.java
@@ -47,6 +47,8 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                                 .requestMatchers("/outing-admin/**").hasAnyAuthority(ADMIN,TEACHER)
                                 .requestMatchers(GET,"/attendance/list").hasAnyAuthority(ADMIN,TEACHER)
                                 .requestMatchers("/sleepover-admin/**").hasAnyAuthority(ADMIN,TEACHER)
+                                .requestMatchers(GET,"/user-admin/find-all").hasAnyAuthority(ADMIN,TEACHER)
+                                .requestMatchers(GET,"/user-admin/search").hasAnyAuthority(ADMIN,TEACHER)
 
                                 .requestMatchers(POST,"/attendance").hasAuthority(USER)
                                 .requestMatchers(POST,"/outing").hasAuthority(USER)
@@ -55,7 +57,10 @@ public SecurityFilterChain securityFilterChain(HttpSecurity http) throws Excepti
                                 .requestMatchers(PATCH,"/user/room").hasAuthority(USER)
 
                                 .requestMatchers("/school/**").hasAuthority(ADMIN)
-                                .requestMatchers("/user-admin/**").hasAuthority(ADMIN)
+                                .requestMatchers(PATCH,"/user-admin/approve").hasAuthority(ADMIN)
+                                .requestMatchers(PATCH,"/user-admin/reject").hasAuthority(ADMIN)
+                                .requestMatchers(GET,"/user-admin/await-user").hasAuthority(ADMIN)
+
                                 .anyRequest().authenticated()
                 )
                 .addFilterAfter(jwtAuthenticationFilter, UsernamePasswordAuthenticationFilter.class)