diff --git a/src/main/java/itn/let/cop/bbs/service/EgovBBSManageService.java b/src/main/java/itn/let/cop/bbs/service/EgovBBSManageService.java index 487a888e..2c43f145 100644 --- a/src/main/java/itn/let/cop/bbs/service/EgovBBSManageService.java +++ b/src/main/java/itn/let/cop/bbs/service/EgovBBSManageService.java @@ -217,6 +217,8 @@ public interface EgovBBSManageService { public List selectAdminMainBoardByDash(BoardVO boardVO) throws Exception; + public List selectUserBbsWriteList(BoardVO boardVO) throws Exception; + public int selectAdminMainNewBoardCnt(BoardVO boardVO) throws Exception; public int selectAdminMainYdaBoardCnt(BoardVO boardVO) throws Exception; diff --git a/src/main/java/itn/let/cop/bbs/service/impl/BBSManageDAO.java b/src/main/java/itn/let/cop/bbs/service/impl/BBSManageDAO.java index 8420f75d..0b1a44d1 100644 --- a/src/main/java/itn/let/cop/bbs/service/impl/BBSManageDAO.java +++ b/src/main/java/itn/let/cop/bbs/service/impl/BBSManageDAO.java @@ -350,6 +350,11 @@ public class BBSManageDAO extends EgovAbstractDAO { return (List) list("BBSManageDAO.selectAdminMainBoardByDash", boardVO); } + @SuppressWarnings("unchecked") + public List selectUserBbsWriteList(BoardVO boardVO) throws Exception { + return (List) list("BBSManageDAO.selectUserBbsWriteList", boardVO); + } + public int selectAdminMainNewBoardCnt(BoardVO boardVO) throws Exception{ return (Integer)select("BBSManageDAO.selectAdminMainNewBoardCnt", boardVO); } diff --git a/src/main/java/itn/let/cop/bbs/service/impl/EgovBBSManageServiceImpl.java b/src/main/java/itn/let/cop/bbs/service/impl/EgovBBSManageServiceImpl.java index 024772c6..e634f01e 100644 --- a/src/main/java/itn/let/cop/bbs/service/impl/EgovBBSManageServiceImpl.java +++ b/src/main/java/itn/let/cop/bbs/service/impl/EgovBBSManageServiceImpl.java @@ -331,6 +331,11 @@ public class EgovBBSManageServiceImpl extends EgovAbstractServiceImpl implements public List selectAdminMainBoardByDash(BoardVO boardVO) throws Exception { return bbsMngDAO.selectAdminMainBoardByDash(boardVO); } + + @Override + public List selectUserBbsWriteList(BoardVO boardVO) throws Exception { + return bbsMngDAO.selectUserBbsWriteList(boardVO); + } @Override public int selectAdminMainNewBoardCnt(BoardVO boardVO) throws Exception { diff --git a/src/main/java/itn/let/cop/bbs/web/EgovBBSManageController.java b/src/main/java/itn/let/cop/bbs/web/EgovBBSManageController.java index 818f20ab..be44c270 100644 --- a/src/main/java/itn/let/cop/bbs/web/EgovBBSManageController.java +++ b/src/main/java/itn/let/cop/bbs/web/EgovBBSManageController.java @@ -2242,6 +2242,20 @@ public class EgovBBSManageController { ModelAndView modelAndView = new ModelAndView(); modelAndView.setViewName("jsonView"); + // Start => bbsId를 변조해서 공지사항에 글 등록 방지 처리 + //boardVO.setBbsId("BBSMSTR_000000000651"); // 공지사항 + List userBbsWriteList = bbsMngService.selectUserBbsWriteList(boardVO); + System.out.println("boardVO.getBbsId : " + boardVO.getBbsId()); + System.out.println("userBbsWriteList.size() : " + userBbsWriteList.size()); + + if (userBbsWriteList.size() == 0) { + // 1:1문의, 불편사항 등 고객이 등록할수있는 게시판 목록이 아닐경우 + modelAndView.addObject("message", "잘못된 접근입니다.\n관리자에게 문의하세요."); + modelAndView.addObject("result", "fail"); + return modelAndView; + } + // End + if (bmVO == null || ("N").equals(bmVO.getUseAt())) { redirectAttributes.addFlashAttribute("message", egovMessageSource.getMessage("fail.common.imposbl")); //return "redirect:/web/main/mainPage.do"; @@ -2622,6 +2636,20 @@ public class EgovBBSManageController { ModelAndView modelAndView = new ModelAndView(); modelAndView.setViewName("jsonView"); + // Start => bbsId를 변조해서 공지사항에 글 등록 방지 처리 + //boardVO.setBbsId("BBSMSTR_000000000651"); // 공지사항 + List userBbsWriteList = bbsMngService.selectUserBbsWriteList(boardVO); + System.out.println("boardVO.getBbsId : " + boardVO.getBbsId()); + System.out.println("userBbsWriteList.size() : " + userBbsWriteList.size()); + + if (userBbsWriteList.size() == 0) { + // 1:1문의, 불편사항 등 고객이 등록할수있는 게시판 목록이 아닐경우 + modelAndView.addObject("message", "잘못된 접근입니다.\n관리자에게 문의하세요."); + modelAndView.addObject("result", "fail"); + return modelAndView; + } + // End + BoardMasterVO bmVO = new BoardMasterVO(); bmVO.setBbsId(boardVO.getBbsId()); bmVO = bbsAttrbService.selectBBSMasterInf(bmVO); diff --git a/src/main/resources/egovframework/sqlmap/let/cop/bbs/EgovBoard_SQL_Mysql.xml b/src/main/resources/egovframework/sqlmap/let/cop/bbs/EgovBoard_SQL_Mysql.xml index 39ab4c2b..b3dda10d 100644 --- a/src/main/resources/egovframework/sqlmap/let/cop/bbs/EgovBoard_SQL_Mysql.xml +++ b/src/main/resources/egovframework/sqlmap/let/cop/bbs/EgovBoard_SQL_Mysql.xml @@ -1767,6 +1767,17 @@ LIMIT #recordCountPerPage# OFFSET #firstIndex# + +