diff --git a/src/main/java/io/company/localhost/controller/api/MainController.java b/src/main/java/io/company/localhost/controller/api/MainController.java index ee58698..013321b 100644 --- a/src/main/java/io/company/localhost/controller/api/MainController.java +++ b/src/main/java/io/company/localhost/controller/api/MainController.java @@ -4,7 +4,6 @@ import java.util.List; import org.springframework.web.bind.annotation.GetMapping; import org.springframework.web.bind.annotation.PostMapping; -import org.springframework.web.bind.annotation.RequestBody; import org.springframework.web.bind.annotation.RequestMapping; import org.springframework.web.bind.annotation.RestController; @@ -25,6 +24,7 @@ import lombok.extern.slf4j.Slf4j; public class MainController { private final MainService mainService; + @Member @ParameterCheck diff --git a/src/main/java/io/company/localhost/service/MainService.java b/src/main/java/io/company/localhost/service/MainService.java index c562fc6..c816052 100644 --- a/src/main/java/io/company/localhost/service/MainService.java +++ b/src/main/java/io/company/localhost/service/MainService.java @@ -21,6 +21,7 @@ import org.springframework.stereotype.Service; import io.company.localhost.common.dto.ApiResponse; import io.company.localhost.common.dto.MapDto; +import io.company.localhost.vo.MemberVo; import lombok.RequiredArgsConstructor; @Service @@ -28,11 +29,8 @@ import lombok.RequiredArgsConstructor; public class MainService { private final commoncodService commoncodService; - private final NetmemberService netmemberService; - private final localvacaService localvacaService; - private final LocalevntService localevntService; @@ -106,8 +104,13 @@ public class MainService { * @return */ public ApiResponse registerMember(long memberSeq) { - int result = netmemberService.registerMember(memberSeq); + MemberVo user = netmemberService.getUserInfoById(memberSeq); + if(user.getId() != memberSeq || !"ROLE_ADMIN".equals(user.getRole())) { + return ApiResponse.error(HttpStatus.FORBIDDEN, "사용 권한 없음"); + } + + int result = netmemberService.registerMember(memberSeq); return result == 1 ? ApiResponse.ok("사원 등록 성공") : ApiResponse.ok("사원 등록 실패"); } @@ -118,8 +121,13 @@ public class MainService { * @return */ public ApiResponse rejectMember(long memberSeq) { - int result = netmemberService.rejectMember(memberSeq); + MemberVo user = netmemberService.getUserInfoById(memberSeq); + if(user.getId() != memberSeq || !"ROLE_ADMIN".equals(user.getRole())) { + return ApiResponse.error(HttpStatus.UNAUTHORIZED, "사용 권한 없음"); + } + + int result = netmemberService.rejectMember(memberSeq); return result == 1 ? ApiResponse.ok("미승인 대상자 등록") : ApiResponse.ok("미승인 대상자 등록 실패"); }