[issue - 65] merge ot dev
@@ -86,6 +86,12 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
.hasAnyRole("USER", "ADMIN", "MODERATOR")
.antMatchers("/place/info/favorite")
.hasAnyRole("USER", "ADMIN", "MODERATOR")
+ .antMatchers(HttpMethod.PATCH, "/user/status")
+ .hasAnyRole("ADMIN", "MODERATOR")
+ .antMatchers(HttpMethod.PATCH, "/user/role")
+ .hasRole("ADMIN")
+ .antMatchers(HttpMethod.GET, "/user")
+ .hasAnyRole("ADMIN", "MODERATOR")
.anyRequest()
.hasAnyRole("ADMIN")
.and()
