[Refactor] 횃불이 이미지 관련 권한 설정 변경

inu-appcenter · May 1, 2024 · dfdaaf1 · dfdaaf1
1 parent 1995fed
commit dfdaaf1
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/main/java/kr/inuappcenterportal/inuportal/config/SecurityConfig.java b/src/main/java/kr/inuappcenterportal/inuportal/config/SecurityConfig.java
@@ -40,8 +40,8 @@ public SecurityFilterChain securityFilterChain(HttpSecurity httpSecurity) throws
                         .requestMatchers(HttpMethod.POST,"/api/members/**","/api/members").permitAll()
                         .requestMatchers("/api/members/all").hasRole("ADMIN")
                         .requestMatchers("/api/members/**","/api/members").hasAnyRole("USER","ADMIN")
-                        .requestMatchers(HttpMethod.GET,"/api/posts/**","/api/posts","/api/fires").permitAll()
-                        .requestMatchers("/api/posts/**","/api/posts","/api/fires/**").hasAnyRole("USER","ADMIN")
+                        .requestMatchers(HttpMethod.GET,"/api/posts/**","/api/posts","/api/fires/**").permitAll()
+                        .requestMatchers("/api/posts/**","/api/posts","/api/fires/**","/api/fires").hasAnyRole("USER","ADMIN")
                         .requestMatchers("/api/replies/**").hasAnyRole("USER","ADMIN")
                         .requestMatchers("/api/search","/api/search/**","/api/notices","/api/notices/**","api/schedules","api/schedules/**").permitAll()
                         .requestMatchers("/api/folders/**","/api/folders").hasAnyRole("USER","ADMIN")