style: 권한 순서 통일

IT-Cotato · Oct 9, 2024 · a7bad98 · a7bad98
1 parent 95b7f40
commit a7bad98
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/src/main/java/org/cotato/csquiz/common/config/SecurityConfig.java b/src/main/java/org/cotato/csquiz/common/config/SecurityConfig.java
@@ -93,13 +93,13 @@ public SecurityFilterChain filterChain(HttpSecurity http) throws Exception {
                                 .requestMatchers("/v1/api/session/cs-on").hasAnyRole("EDUCATION", "ADMIN")
                                 .requestMatchers(new AntPathRequestMatcher("/v1/api/session", "GET")).authenticated()
                                 .requestMatchers("/v1/api/session/**").hasAnyRole("ADMIN")
-                                .requestMatchers("/v2/api/attendances/records").hasAnyRole("ADMIN", "OPERATION")
+                                .requestMatchers("/v2/api/attendances/records").hasAnyRole("OPERATION", "ADMIN")
                                 .requestMatchers("/v2/api/attendances/{attendance-id}/records").hasAnyRole("ADMIN")
-                                .requestMatchers("/v2/api/attendances").hasAnyRole("ADMIN", "OPERATION")
+                                .requestMatchers("/v2/api/attendances").hasAnyRole("OPERATION", "ADMIN")
                                 .requestMatchers("/v2/api/attendances/info")
-                                .hasAnyRole("ADMIN", "OPERATION", "EDUCATION", "MEMBER")
+                                .hasAnyRole("MEMBER", "EDUCATION", "OPERATION", "ADMIN")
                                 .requestMatchers("/v2/api/attendances/records/**")
-                                .hasAnyRole("ADMIN", "OPERATION", "EDUCATION", "MEMBER")
+                                .hasAnyRole("MEMBER", "EDUCATION", "OPERATION", "ADMIN")
                                 .requestMatchers(new AntPathRequestMatcher("/v1/api/socket/token", "POST"))
                                 .hasAnyRole("MEMBER", "EDUCATION", "OPERATION", "ADMIN")
 //                        .requestMatchers("/v2/api/events/attendances").hasAnyRole("MEMBER", "ADMIN", "EDUCATION")