ROLE_ADMIN, ROLE_TASK_ADMIN, ROLE_USER_MANAGE 권한을 가진 사용자만 권한과 사용자를 매핑 가능하도록 수정

src/main/webapp/WEB-INF/jsp/base/authority/user-list.jsp

@@ -91,10 +91,49 @@ ${infoPrefix}Control.onCurrentUserChange = item => {
 ${infoPrefix}Control.onUserSelect = selected => {
 	let ${infoPrefix}List = ${infoPrefix}Control.users.dataset;
 	let keys = selected.map(e => ${infoPrefix}List.getKey(e));
+
 	$("#authUserList input[type='checkbox']").each(function() {
 		let checkbox = $(this);
 		checkbox.prop("checked", keys.includes(checkbox.val()));
 	});
 
-	$("#btnRemoveAuthUsers").prop("disabled", keys.length < 1);
+	let userEmpty = keys.length < 1;
+
+	let curAuth = ${infoPrefix}Control.authorities.dataset.getCurrent();
+	let hasAuthToUserMappingAuth = false;
+	if(curAuth != null){
+		if(curAuth.AUTH_ID == "ROLE_USER" || curAuth.AUTH_ID == "ROLE_ANONYMOUS"){
+			hasAuthToUserMappingAuth = false;
+		} else if(curAuth.AUTH_ID == "ROLE_ADMIN"){
+			if(MY_INFO.authorities != null && MY_INFO.authorities.length != 0){
+				for(let i=0; i < MY_INFO.authorities.length; i++){
+					if(MY_INFO.authorities[i].authority == "ROLE_ADMIN"){
+						hasAuthToUserMappingAuth = true;
+					}
+				}
+			}
+		} else if(curAuth.AUTH_ID == "ROLE_TASK_ADMIN"){
+			if(MY_INFO.authorities != null && MY_INFO.authorities.length != 0){
+				for(let i=0; i < MY_INFO.authorities.length; i++){
+					if(MY_INFO.authorities[i].authority == "ROLE_ADMIN"
+					|| MY_INFO.authorities[i].authority == "ROLE_TASK_ADMIN"){
+						hasAuthToUserMappingAuth = true;
+					}
+				}
+			}
+		} else {
+			if(MY_INFO.authorities != null && MY_INFO.authorities.length != 0){
+				for(let i=0; i < MY_INFO.authorities.length; i++){
+					if(MY_INFO.authorities[i].authority == "ROLE_ADMIN"
+					|| MY_INFO.authorities[i].authority == "ROLE_TASK_ADMIN"
+					|| MY_INFO.authorities[i].authority == "ROLE_USER_MANAGE"){
+						hasAuthToUserMappingAuth = true;
+					}
+				}
+			}
+		}
+	}
+
+	$("#btnAddAuthUsers").prop("disabled", (!hasAuthToUserMappingAuth));
+	$("#btnRemoveAuthUsers").prop("disabled", (userEmpty || !hasAuthToUserMappingAuth));
 };</c:set>