From e27900e5c0a9fab21285e37ce6f29fa9a6e3c980 Mon Sep 17 00:00:00 2001
From: leebeomjun <leebj91@xit.co.kr>
Date: Mon, 18 Sep 2023 10:51:13 +0900
Subject: [PATCH] =?UTF-8?q?=EC=86=8C=EC=86=8D=EA=B8=B0=EA=B4=80=EC=9D=B4?=
 =?UTF-8?q?=20default=EC=9D=B8=20=EC=9C=A0=EC=A0=80=EB=A7=8C=20=EC=B5=9C?=
 =?UTF-8?q?=EA=B3=A0=EA=B4=80=EB=A6=AC=EC=9E=90=20=EB=A9=94=EB=89=B4=20?=
 =?UTF-8?q?=EC=A0=91=EA=B7=BC=20=EA=B0=80=EB=8A=A5=ED=95=98=EB=8F=84?=
 =?UTF-8?q?=EB=A1=9D=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../java/cokr/xit/fims/base/UserController.java    | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/src/main/java/cokr/xit/fims/base/UserController.java b/src/main/java/cokr/xit/fims/base/UserController.java
index 0cc9435c..26438497 100644
--- a/src/main/java/cokr/xit/fims/base/UserController.java
+++ b/src/main/java/cokr/xit/fims/base/UserController.java
@@ -9,7 +9,9 @@ import java.util.ArrayList;
 import java.util.List;
 
 import javax.annotation.Resource;
+import javax.servlet.http.HttpServletResponse;
 
+import org.springframework.http.HttpStatus;
 import org.springframework.stereotype.Controller;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RequestParam;
@@ -56,9 +58,17 @@ public class UserController extends cokr.xit.base.user.web.UserController<Manage
 	}
 
 	@RequestMapping(name="최고관리자 메인",value="/superUser/main.do")
-	public ModelAndView superUserMain() {
+	public ModelAndView superUserMain(HttpServletResponse hres) {
 		ModelAndView mav = new ModelAndView();
-		mav.setViewName("fims/superUser-main");
+
+		if(!currentUser().getInstitute().equals("default")) {
+			hres.setStatus(HttpStatus.FORBIDDEN.value());
+			mav.setViewName("jsonView");
+			mav.addObject("message","메뉴 접근 권한이 없습니다.");
+		} else {
+			mav.setViewName("fims/superUser-main");
+		}
+
 		return mav;
 	}