Merge pull request #160 from IT-Cotato/develop

[Release] V2.2024.09.20.01
IT-Cotato · Sep 20, 2024 · 3eff067 · 3eff067
2 parents 5fbc2af + 4e1fded
commit 3eff067
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/main/java/org/cotato/csquiz/common/config/SecurityConfig.java b/src/main/java/org/cotato/csquiz/common/config/SecurityConfig.java
@@ -71,6 +71,8 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
                                 .requestMatchers(WHITE_LIST).permitAll()
                                 .requestMatchers("/v1/api/education/result/**").hasAnyRole("MEMBER", "EDUCATION", "ADMIN")
                                 .requestMatchers("/v1/api/education/from").hasAnyRole("MEMBER", "EDUCATION", "ADMIN")
+                                .requestMatchers(new AntPathRequestMatcher("/v1/api/education/winner", "GET")).hasAnyRole("MEMBER", "EDUCATION", "ADMIN")
+                                .requestMatchers(new AntPathRequestMatcher("/v1/api/education/kings", "GET")).hasAnyRole("MEMBER", "EDUCATION", "ADMIN")
                                 .requestMatchers(new AntPathRequestMatcher("/v1/api/education/status", "GET"))
                                 .hasAnyRole("MEMBER", "EDUCATION", "ADMIN")
                                 .requestMatchers(new AntPathRequestMatcher("/v1/api/education", "GET")).authenticated()