Merge pull request '권한 테스트 api 수정' (#50) from feat/dev_251201 into develop

Reviewed-on: https://kamco.gitea.gs.dabeeo.com/dabeeo/kamco-dabeeo-backoffice/pulls/50
2025-12-12 10:02:53 +09:00
parent 790c212a11 f642f7c723
commit 8cb664771a
6 changed files with 239 additions and 231 deletions
--- a/src/main/java/com/kamco/cd/kamcoback/auth/CustomUserDetails.java
+++ b/src/main/java/com/kamco/cd/kamcoback/auth/CustomUserDetails.java
@@ -2,8 +2,9 @@ package com.kamco.cd.kamcoback.auth;

 import com.kamco.cd.kamcoback.postgres.entity.MemberEntity;
 import java.util.Collection;
-import java.util.Collections;
+import java.util.List;
 import org.springframework.security.core.GrantedAuthority;
+import org.springframework.security.core.authority.SimpleGrantedAuthority;
 import org.springframework.security.core.userdetails.UserDetails;

 public class CustomUserDetails implements UserDetails {
@@ -16,7 +17,7 @@ public class CustomUserDetails implements UserDetails {

  @Override
  public Collection<? extends GrantedAuthority> getAuthorities() {
-    return Collections.emptyList();
+    return List.of(new SimpleGrantedAuthority("ROLE_" + member.getUserRole()));
  }

  @Override
--- a/src/main/java/com/kamco/cd/kamcoback/common/enums/RoleType.java
+++ b/src/main/java/com/kamco/cd/kamcoback/common/enums/RoleType.java
@@ -7,9 +7,9 @@ import lombok.Getter;
@Getter
@AllArgsConstructor
 public enum RoleType implements EnumType {
-  ROLE_ADMIN("관리자"),
-  ROLE_LABELER("라벨러"),
-  ROLE_REVIEWER("검수자");
+  ADMIN("관리자"),
+  LABELER("라벨러"),
+  REVIEWER("검수자");

  private final String desc;

--- a/src/main/java/com/kamco/cd/kamcoback/config/GlobalExceptionHandler.java
+++ b/src/main/java/com/kamco/cd/kamcoback/config/GlobalExceptionHandler.java
@@ -45,197 +45,197 @@ public class GlobalExceptionHandler {
  @ResponseStatus(HttpStatus.UNPROCESSABLE_ENTITY)
  @ExceptionHandler(EntityNotFoundException.class)
  public ApiResponseDto<String> handlerEntityNotFoundException(
-    EntityNotFoundException e, HttpServletRequest request) {
+      EntityNotFoundException e, HttpServletRequest request) {
    log.warn("[EntityNotFoundException] resource :{} ", e.getMessage());
    String codeName = "NOT_FOUND_DATA";
    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf("UNPROCESSABLE_ENTITY"),
-        ErrorLogDto.LogErrorLevel.WARNING,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf("UNPROCESSABLE_ENTITY"),
+            ErrorLogDto.LogErrorLevel.WARNING,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf("UNPROCESSABLE_ENTITY"),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf("UNPROCESSABLE_ENTITY"),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.BAD_REQUEST)
  @ExceptionHandler(HttpMessageNotReadableException.class)
  public ApiResponseDto<String> handleUnreadable(
-    HttpMessageNotReadableException e, HttpServletRequest request) {
+      HttpMessageNotReadableException e, HttpServletRequest request) {
    log.warn("[HttpMessageNotReadableException] resource :{} ", e.getMessage());
    String codeName = "BAD_REQUEST";
    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf(codeName),
-        ErrorLogDto.LogErrorLevel.WARNING,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf(codeName),
+            ErrorLogDto.LogErrorLevel.WARNING,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf(codeName),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf(codeName),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.NOT_FOUND)
  @ExceptionHandler(NoSuchElementException.class)
  public ApiResponseDto<String> handlerNoSuchElementException(
-    NoSuchElementException e, HttpServletRequest request) {
+      NoSuchElementException e, HttpServletRequest request) {
    log.warn("[NoSuchElementException] resource :{} ", e.getMessage());
    String codeName = "NOT_FOUND_DATA";
    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf(codeName),
-        ErrorLogDto.LogErrorLevel.WARNING,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf(codeName),
+            ErrorLogDto.LogErrorLevel.WARNING,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf("NOT_FOUND"),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf("NOT_FOUND"),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.BAD_REQUEST)
  @ExceptionHandler(IllegalArgumentException.class)
  public ApiResponseDto<String> handlerIllegalArgumentException(
-    IllegalArgumentException e, HttpServletRequest request) {
+      IllegalArgumentException e, HttpServletRequest request) {
    log.warn("[handlerIllegalArgumentException] resource :{} ", e.getMessage());
    String codeName = "BAD_REQUEST";
    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf(codeName),
-        ErrorLogDto.LogErrorLevel.WARNING,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf(codeName),
+            ErrorLogDto.LogErrorLevel.WARNING,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf(codeName),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf(codeName),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.UNPROCESSABLE_ENTITY)
  @ExceptionHandler(DataIntegrityViolationException.class)
  public ApiResponseDto<String> handlerDataIntegrityViolationException(
-    DataIntegrityViolationException e, HttpServletRequest request) {
+      DataIntegrityViolationException e, HttpServletRequest request) {
    log.warn("[DataIntegrityViolationException] resource :{} ", e.getMessage());
    String codeName = "DATA_INTEGRITY_ERROR";
    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf("UNPROCESSABLE_ENTITY"),
-        ErrorLogDto.LogErrorLevel.CRITICAL,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf("UNPROCESSABLE_ENTITY"),
+            ErrorLogDto.LogErrorLevel.CRITICAL,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf("UNPROCESSABLE_ENTITY"),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf("UNPROCESSABLE_ENTITY"),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.BAD_REQUEST)
  @ExceptionHandler(MethodArgumentNotValidException.class)
  public ApiResponseDto<String> handlerMethodArgumentNotValidException(
-    MethodArgumentNotValidException e, HttpServletRequest request) {
+      MethodArgumentNotValidException e, HttpServletRequest request) {
    log.warn("[MethodArgumentNotValidException] resource :{} ", e.getMessage());
    String codeName = "BAD_REQUEST";
    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf(codeName),
-        ErrorLogDto.LogErrorLevel.WARNING,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf(codeName),
+            ErrorLogDto.LogErrorLevel.WARNING,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf(codeName),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf(codeName),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.FORBIDDEN)
  @ExceptionHandler(AccessDeniedException.class)
  public ApiResponseDto<String> handlerAccessDeniedException(
-    AccessDeniedException e, HttpServletRequest request) {
+      AccessDeniedException e, HttpServletRequest request) {
    log.warn("[AccessDeniedException] resource :{} ", e.getMessage());
    String codeName = "FORBIDDEN";
    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf(codeName),
-        ErrorLogDto.LogErrorLevel.ERROR,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf(codeName),
+            ErrorLogDto.LogErrorLevel.ERROR,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf(codeName),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf(codeName),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.BAD_GATEWAY)
  @ExceptionHandler(HttpServerErrorException.BadGateway.class)
  public ApiResponseDto<String> handlerHttpServerErrorException(
-    HttpServerErrorException e, HttpServletRequest request) {
+      HttpServerErrorException e, HttpServletRequest request) {
    log.warn("[HttpServerErrorException] resource :{} ", e.getMessage());
    String codeName = "BAD_GATEWAY";
    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf(codeName),
-        ErrorLogDto.LogErrorLevel.CRITICAL,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf(codeName),
+            ErrorLogDto.LogErrorLevel.CRITICAL,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf(codeName),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf(codeName),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.UNPROCESSABLE_ENTITY)
  @ExceptionHandler(IllegalStateException.class)
  public ApiResponseDto<String> handlerIllegalStateException(
-    IllegalStateException e, HttpServletRequest request) {
+      IllegalStateException e, HttpServletRequest request) {
    log.warn("[IllegalStateException] resource :{} ", e.getMessage());

    String codeName = "UNPROCESSABLE_ENTITY";
    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf(codeName),
-        ErrorLogDto.LogErrorLevel.WARNING,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf(codeName),
+            ErrorLogDto.LogErrorLevel.WARNING,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf(codeName),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf(codeName),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.BAD_REQUEST)
  @ExceptionHandler(MemberException.DuplicateMemberException.class)
  public ApiResponseDto<String> handlerDuplicateMemberException(
-    MemberException.DuplicateMemberException e, HttpServletRequest request) {
+      MemberException.DuplicateMemberException e, HttpServletRequest request) {
    log.warn("[DuplicateMemberException] resource :{} ", e.getMessage());

    String codeName = "";
@@ -250,112 +250,112 @@ public class GlobalExceptionHandler {
    }

    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf("BAD_REQUEST"),
-        ErrorLogDto.LogErrorLevel.WARNING,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf("BAD_REQUEST"),
+            ErrorLogDto.LogErrorLevel.WARNING,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf("BAD_REQUEST"),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf("BAD_REQUEST"),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.BAD_REQUEST)
  @ExceptionHandler(MemberException.MemberNotFoundException.class)
  public ApiResponseDto<String> handlerMemberNotFoundException(
-    MemberException.MemberNotFoundException e, HttpServletRequest request) {
+      MemberException.MemberNotFoundException e, HttpServletRequest request) {
    log.warn("[MemberNotFoundException] resource :{} ", e.getMessage());

    String codeName = "NOT_FOUND_USER";

    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf("BAD_REQUEST"),
-        ErrorLogDto.LogErrorLevel.WARNING,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf("BAD_REQUEST"),
+            ErrorLogDto.LogErrorLevel.WARNING,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf("BAD_REQUEST"),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf("BAD_REQUEST"),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.CONFLICT)
  @ExceptionHandler(DuplicateKeyException.class)
  public ApiResponseDto<String> handlerDuplicateKeyException(
-    DuplicateKeyException e, HttpServletRequest request) {
+      DuplicateKeyException e, HttpServletRequest request) {
    log.warn("[DuplicateKeyException] resource :{} ", e.getMessage());

    String codeName = "DUPLICATE_DATA";

    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf("CONFLICT"),
-        ErrorLogDto.LogErrorLevel.WARNING,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf("CONFLICT"),
+            ErrorLogDto.LogErrorLevel.WARNING,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf("CONFLICT"),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf("CONFLICT"),
+        errorLog.getId());
  }

  @ExceptionHandler(BadCredentialsException.class)
  public ResponseEntity<ApiResponseDto<String>> handleBadCredentials(
-    BadCredentialsException e, HttpServletRequest request) {
+      BadCredentialsException e, HttpServletRequest request) {
    log.warn("[BadCredentialsException] resource : {} ", e.getMessage());

    String codeName = "UNAUTHORIZED";

    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf(codeName),
-        ErrorLogDto.LogErrorLevel.WARNING,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf(codeName),
+            ErrorLogDto.LogErrorLevel.WARNING,
+            e.getStackTrace());

    ApiResponseDto<String> body =
-      ApiResponseDto.createException(
-        ApiResponseCode.getCode(codeName),
-        ApiResponseCode.getMessage(codeName),
-        HttpStatus.valueOf(codeName),
-        errorLog.getId());
+        ApiResponseDto.createException(
+            ApiResponseCode.getCode(codeName),
+            ApiResponseCode.getMessage(codeName),
+            HttpStatus.valueOf(codeName),
+            errorLog.getId());

    return ResponseEntity.status(HttpStatus.UNAUTHORIZED) // 🔥 여기서 401 지정
-      .body(body);
+        .body(body);
  }

  @ResponseStatus(HttpStatus.INTERNAL_SERVER_ERROR)
  @ExceptionHandler(RuntimeException.class)
  public ApiResponseDto<String> handlerRuntimeException(
-    RuntimeException e, HttpServletRequest request) {
+      RuntimeException e, HttpServletRequest request) {
    log.warn("[RuntimeException] resource :{} ", e.getMessage());

    String codeName = "INTERNAL_SERVER_ERROR";
    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf(codeName),
-        ErrorLogDto.LogErrorLevel.CRITICAL,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf(codeName),
+            ErrorLogDto.LogErrorLevel.CRITICAL,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf(codeName),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf(codeName),
+        errorLog.getId());
  }

  @ResponseStatus(HttpStatus.INTERNAL_SERVER_ERROR)
@@ -365,36 +365,36 @@ public class GlobalExceptionHandler {

    String codeName = "INTERNAL_SERVER_ERROR";
    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request,
-        ApiResponseCode.getCode(codeName),
-        HttpStatus.valueOf(codeName),
-        ErrorLogDto.LogErrorLevel.CRITICAL,
-        e.getStackTrace());
+        saveErrorLogData(
+            request,
+            ApiResponseCode.getCode(codeName),
+            HttpStatus.valueOf(codeName),
+            ErrorLogDto.LogErrorLevel.CRITICAL,
+            e.getStackTrace());

    return ApiResponseDto.createException(
-      ApiResponseCode.getCode(codeName),
-      ApiResponseCode.getMessage(codeName),
-      HttpStatus.valueOf(codeName),
-      errorLog.getId());
+        ApiResponseCode.getCode(codeName),
+        ApiResponseCode.getMessage(codeName),
+        HttpStatus.valueOf(codeName),
+        errorLog.getId());
  }

  /**
   * 에러 로그 테이블 저장 로직
   *
-   * @param request       : request
-   * @param errorCode     : 정의된 enum errorCode
-   * @param httpStatus    : HttpStatus 값
+   * @param request : request
+   * @param errorCode : 정의된 enum errorCode
+   * @param httpStatus : HttpStatus 값
   * @param logErrorLevel : WARNING, ERROR, CRITICAL
-   * @param stackTrace    : 에러 내용
+   * @param stackTrace : 에러 내용
   * @return : insert하고 결과로 받은 Entity
   */
  private ErrorLogEntity saveErrorLogData(
-    HttpServletRequest request,
-    ApiResponseCode errorCode,
-    HttpStatus httpStatus,
-    ErrorLogDto.LogErrorLevel logErrorLevel,
-    StackTraceElement[] stackTrace) {
+      HttpServletRequest request,
+      ApiResponseCode errorCode,
+      HttpStatus httpStatus,
+      ErrorLogDto.LogErrorLevel logErrorLevel,
+      StackTraceElement[] stackTrace) {

    Long userid = null;

@@ -408,35 +408,35 @@ public class GlobalExceptionHandler {
     * 만든 CustomUserDetails 타입인가? 체크
     */
    if (request.getUserPrincipal() instanceof UsernamePasswordAuthenticationToken auth
-      && auth.getPrincipal() instanceof CustomUserDetails customUserDetails) {
+        && auth.getPrincipal() instanceof CustomUserDetails customUserDetails) {

      // audit 에는 long 타입 user_id가 들어가지만 토큰 sub은 uuid여서 user_id 가져오기
      userid = customUserDetails.getMember().getId();
    }

    String stackTraceStr =
-      Arrays.stream(stackTrace)
-        .map(StackTraceElement::toString)
-        .collect(Collectors.joining("\n"))
-        .substring(0, Math.min(stackTrace.length, 255));
+        Arrays.stream(stackTrace)
+            .map(StackTraceElement::toString)
+            .collect(Collectors.joining("\n"))
+            .substring(0, Math.min(stackTrace.length, 255));

    ErrorLogEntity errorLogEntity =
-      new ErrorLogEntity(
-        request.getRequestURI(),
-        ApiLogFunction.getEventType(request),
-        logErrorLevel,
-        String.valueOf(httpStatus.value()),
-        errorCode.getText(),
-        stackTraceStr,
-        userid,
-        ZonedDateTime.now());
+        new ErrorLogEntity(
+            request.getRequestURI(),
+            ApiLogFunction.getEventType(request),
+            logErrorLevel,
+            String.valueOf(httpStatus.value()),
+            errorCode.getText(),
+            stackTraceStr,
+            userid,
+            ZonedDateTime.now());

    return errorLogRepository.save(errorLogEntity);
  }

  @ExceptionHandler(CustomApiException.class)
  public ResponseEntity<ApiResponseDto<String>> handleCustomApiException(
-    CustomApiException e, HttpServletRequest request) {
+      CustomApiException e, HttpServletRequest request) {
    log.warn("[CustomApiException] resource : {}", e.getMessage());

    String codeName = e.getCodeName();
@@ -446,11 +446,11 @@ public class GlobalExceptionHandler {
    ApiResponseCode apiCode = ApiResponseCode.getCode(codeName);

    ErrorLogEntity errorLog =
-      saveErrorLogData(
-        request, apiCode, status, ErrorLogDto.LogErrorLevel.WARNING, e.getStackTrace());
+        saveErrorLogData(
+            request, apiCode, status, ErrorLogDto.LogErrorLevel.WARNING, e.getStackTrace());

    ApiResponseDto<String> body =
-      ApiResponseDto.createException(apiCode, message, status, errorLog.getId());
+        ApiResponseDto.createException(apiCode, message, status, errorLog.getId());

    return new ResponseEntity<>(body, status);
  }
--- a/src/main/java/com/kamco/cd/kamcoback/config/SecurityConfig.java
+++ b/src/main/java/com/kamco/cd/kamcoback/config/SecurityConfig.java
@@ -42,13 +42,25 @@ public class SecurityConfig {
            customAuthenticationProvider) // 로그인 패스워드 비교방식 스프링 기본 Provider 사용안함 커스텀 사용
        .authorizeHttpRequests(
            auth ->
-                auth.requestMatchers(HttpMethod.OPTIONS, "/**")
+                auth
+                    // ADMIN만 접근
+                    .requestMatchers("/api/test/admin")
+                    .hasRole("ADMIN")
+
+                    // ADMIN, LABELER 접근
+                    .requestMatchers("/api/test/label")
+                    .hasAnyRole("ADMIN", "LABELER")
+
+                    // ADMIN, REVIEWER 접근
+                    .requestMatchers("/api/test/review")
+                    .hasAnyRole("ADMIN", "REVIEWER")
+                    .requestMatchers(HttpMethod.OPTIONS, "/**")
                    .permitAll() // preflight 허용
                    .requestMatchers(
                        "/api/auth/signin",
                        "/api/auth/refresh",
                        "/swagger-ui/**",
-                        "/api/members/{memberId}/password",
+                        "/api/members/*/password",
                        "/v3/api-docs/**")
                    .permitAll()
                    .anyRequest()
--- a/src/main/java/com/kamco/cd/kamcoback/members/dto/MembersDto.java
+++ b/src/main/java/com/kamco/cd/kamcoback/members/dto/MembersDto.java
@@ -32,28 +32,24 @@ public class MembersDto {
    private String tempPassword;
    private String status;
    private String statusName;
-    @JsonFormatDttm
-    private ZonedDateTime createdDttm;
-    @JsonFormatDttm
-    private ZonedDateTime updatedDttm;
-    @JsonFormatDttm
-    private ZonedDateTime firstLoginDttm;
-    @JsonFormatDttm
-    private ZonedDateTime lastLoginDttm;
+    @JsonFormatDttm private ZonedDateTime createdDttm;
+    @JsonFormatDttm private ZonedDateTime updatedDttm;
+    @JsonFormatDttm private ZonedDateTime firstLoginDttm;
+    @JsonFormatDttm private ZonedDateTime lastLoginDttm;

    public Basic(
-      Long id,
-      UUID uuid,
-      String userRole,
-      String name,
-      String userId,
-      String employeeNo,
-      String tempPassword,
-      String status,
-      ZonedDateTime createdDttm,
-      ZonedDateTime updatedDttm,
-      ZonedDateTime firstLoginDttm,
-      ZonedDateTime lastLoginDttm) {
+        Long id,
+        UUID uuid,
+        String userRole,
+        String name,
+        String userId,
+        String employeeNo,
+        String tempPassword,
+        String status,
+        ZonedDateTime createdDttm,
+        ZonedDateTime updatedDttm,
+        ZonedDateTime firstLoginDttm,
+        ZonedDateTime lastLoginDttm) {
      this.id = id;
      this.uuid = uuid;
      this.userRole = userRole;
@@ -87,9 +83,7 @@ public class MembersDto {
  @AllArgsConstructor
  public static class SearchReq {

-    @Schema(
-      description = "전체, 관리자(ROLE_ADMIN), 라벨러(ROLE_LABELER), 검수자(ROLE_REVIEWER)",
-      example = "")
+    @Schema(description = "전체, 관리자(ADMIN), 라벨러(LABELER), 검수자(REVIEWER)", example = "")
    private String userRole;

    @Schema(description = "키워드", example = "홍길동")
@@ -111,7 +105,7 @@ public class MembersDto {
  @Setter
  public static class AddReq {

-    @Schema(description = "관리자 유형", example = "ROLE_ADMIN")
+    @Schema(description = "관리자 유형", example = "ADMIN")
    @NotBlank
    @Size(max = 50)
    private String userRole;
@@ -133,7 +127,7 @@ public class MembersDto {
    private String employeeNo;

    public AddReq(
-      String userRole, String name, String userId, String tempPassword, String employeeNo) {
+        String userRole, String name, String userId, String tempPassword, String employeeNo) {
      this.userRole = userRole;
      this.name = name;
      this.userId = userId;
--- a/src/main/java/com/kamco/cd/kamcoback/test/TestApiController.java
+++ b/src/main/java/com/kamco/cd/kamcoback/test/TestApiController.java
@@ -1,5 +1,6 @@
 package com.kamco.cd.kamcoback.test;

+import com.kamco.cd.kamcoback.config.api.ApiResponseDto;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.media.Content;
 import io.swagger.v3.oas.annotations.media.Schema;
@@ -30,8 +31,8 @@ public class TestApiController {
        content = @Content(schema = @Schema(implementation = ErrorResponse.class)))
  })
  @GetMapping("/admin")
-  public String admin() {
-    return "I am administrator";
+  public ApiResponseDto<String> admin() {
+    return ApiResponseDto.ok("I am administrator");
  }

  @Operation(summary = "label test", description = "label test api")
@@ -46,8 +47,8 @@ public class TestApiController {
        content = @Content(schema = @Schema(implementation = ErrorResponse.class)))
  })
  @GetMapping("/label")
-  public String label() {
-    return "Labeling is available.";
+  public ApiResponseDto<String> label() {
+    return ApiResponseDto.ok("Labeling is available.");
  }

  @Operation(summary = "review test", description = "review test api")
@@ -62,7 +63,7 @@ public class TestApiController {
        content = @Content(schema = @Schema(implementation = ErrorResponse.class)))
  })
  @GetMapping("/review")
-  public String review() {
-    return "Review is available.";
+  public ApiResponseDto<String> review() {
+    return ApiResponseDto.ok("Review is available.");
  }
 }