사원 등록에서 로그인 세션으로 등록/반려가 아닌 DB의 권한을 가져와서 처리하는 방향으로 수정

src/main/java/io/company/localhost/controller/api/MainController.java

@@ -4,7 +4,6 @@ import java.util.List;
 
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PostMapping;
-import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
@@ -25,6 +24,7 @@ import lombok.extern.slf4j.Slf4j;
 public class MainController {
 
 	private final MainService mainService;
+
 	
 	@Member
     @ParameterCheck

src/main/java/io/company/localhost/service/MainService.java

@@ -21,6 +21,7 @@ import org.springframework.stereotype.Service;
 
 import io.company.localhost.common.dto.ApiResponse;
 import io.company.localhost.common.dto.MapDto;
+import io.company.localhost.vo.MemberVo;
 import lombok.RequiredArgsConstructor;
 
 @Service
@@ -28,11 +29,8 @@ import lombok.RequiredArgsConstructor;
 public class MainService {
 	
 	private final commoncodService commoncodService;
-	
 	private final NetmemberService netmemberService;
-	
 	private final localvacaService localvacaService;
-	
 	private final LocalevntService localevntService;
 	
 
@@ -106,8 +104,13 @@ public class MainService {
 	 * @return
 	 */
 	public ApiResponse<String> registerMember(long memberSeq) {
-		int result = netmemberService.registerMember(memberSeq);
+		MemberVo user = netmemberService.getUserInfoById(memberSeq);
 		
+		if(user.getId() != memberSeq || !"ROLE_ADMIN".equals(user.getRole())) {
+			return ApiResponse.error(HttpStatus.FORBIDDEN, "사용 권한 없음");
+		}
+		
+		int result = netmemberService.registerMember(memberSeq);
 		return result == 1 ? ApiResponse.ok("사원 등록 성공") : ApiResponse.ok("사원 등록 실패");
 	}
 
@@ -118,8 +121,13 @@ public class MainService {
 	 * @return
 	 */
 	public ApiResponse<String> rejectMember(long memberSeq) {
-		int result = netmemberService.rejectMember(memberSeq);
+		MemberVo user = netmemberService.getUserInfoById(memberSeq);
 		
+		if(user.getId() != memberSeq || !"ROLE_ADMIN".equals(user.getRole())) {
+			return ApiResponse.error(HttpStatus.UNAUTHORIZED, "사용 권한 없음");
+		}
+		
+		int result = netmemberService.rejectMember(memberSeq);
 		return result == 1 ? ApiResponse.ok("미승인 대상자 등록") : ApiResponse.ok("미승인 대상자 등록 실패");
 	}