[feat]판매 등록폼 상세보기 접근 권한 설정 #154

UMC-WOWMARKET · Jan 9, 2024 · 1098e16 · 1098e16
1 parent 04a0d9d
commit 1098e16
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 3 deletions.
diff --git a/...arket/wow_server/mypage/myproject/MySalesProject/controller/MySalesProjectController.java b/...arket/wow_server/mypage/myproject/MySalesProject/controller/MySalesProjectController.java
@@ -35,8 +35,8 @@ public ResponseEntity finishMySales(@PathVariable Long project_id, @Authenticati
 
     //판매 등록폼 상세보기
     @GetMapping("/detail/{project_id}")
-    public MySalesDetailResponseDto getMySalesDetail(@PathVariable Long project_id){
-        return mySalesProjectService.findMySalesDetail(project_id);
+    public MySalesDetailResponseDto getMySalesDetail(@PathVariable Long project_id, @AuthenticationPrincipal User user){
+        return mySalesProjectService.findMySalesDetail(project_id, user);
     }
 
     //판매 등록폼 수정하기

diff --git a/...a/wowmarket/wow_server/mypage/myproject/MySalesProject/service/MySalesProjectService.java b/...a/wowmarket/wow_server/mypage/myproject/MySalesProject/service/MySalesProjectService.java
@@ -51,8 +51,11 @@ public ResponseEntity finishMySalesForm(Long project_id, User user){
     }
 
     @Transactional(readOnly = true)
-    public MySalesDetailResponseDto findMySalesDetail(Long project_id){
+    public MySalesDetailResponseDto findMySalesDetail(Long project_id, User user){
         Project project = projectRepository.findById(project_id).get();
+        if (user == null || user.getId() != project.getUser().getId()){
+            throw new ResponseStatusException(HttpStatus.BAD_REQUEST);
+        }
         List<Item> itemList = itemRepository.findByProject_Id(project_id);
         List<MySalesItemDto> itemDtos = itemList.stream().map(MySalesItemDto::new).collect(Collectors.toList());