added security for /management path
@@ -84,8 +84,7 @@ public class SecurityConfig extends WebSecurityConfigurerAdapter {
.accessDeniedHandler((req, resp, exc) -> resp.sendError(SC_FORBIDDEN, "You don't have authorities."))
.and()
.authorizeRequests()
- .antMatchers("/management/**", "/css/**", "/img/**")
- .permitAll()
+ .antMatchers("/management/**", "/css/**", "/img/**").hasRole(ADMIN)
.antMatchers(
"/ownSecurity/**",
"/place/getListPlaceLocationByMapsBounds/**",
