From 452d72733fae17bc055fda395fe74fb4a9fc644d Mon Sep 17 00:00:00 2001
From: hgkim <hgkim@openerd.com>
Date: Sun, 11 Jan 2026 15:49:28 +0900
Subject: [PATCH 1/3] chore: version up

---
 VERSION | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/VERSION b/VERSION
index 97bceaa..758a46e 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-1.0.14
\ No newline at end of file
+1.0.15
\ No newline at end of file

From 72abd99bd5105135bec6ff557beee2c9cd52aef5 Mon Sep 17 00:00:00 2001
From: hgkim <hgkim@openerd.com>
Date: Sun, 11 Jan 2026 15:50:22 +0900
Subject: [PATCH 2/3] chore: version up

---
 VERSION | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/VERSION b/VERSION
index 758a46e..d941c12 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-1.0.15
\ No newline at end of file
+1.0.16
\ No newline at end of file

From ca3c8d0f2b35c9bb3c61719217e032a2c49d3cf8 Mon Sep 17 00:00:00 2001
From: hyejj19 <hyejj19@naver.com>
Date: Sun, 11 Jan 2026 21:25:27 +0900
Subject: [PATCH 3/3] feat: restrict all data management menus to ROOT_ADMIN
 only

- Add roles: ['ROOT_ADMIN'] to whisky, banner, inquiry, policy menus
- Wrap all data routes with RoleProtectedRoute
- Dashboard remains accessible to all authenticated users

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
---
 src/config/menu.config.ts |  4 ++
 src/routes/index.tsx      | 86 +++++++++++++++++++++++++++++++--------
 2 files changed, 73 insertions(+), 17 deletions(-)

diff --git a/src/config/menu.config.ts b/src/config/menu.config.ts
index ff8c83b..5797130 100644
--- a/src/config/menu.config.ts
+++ b/src/config/menu.config.ts
@@ -34,6 +34,7 @@ export const menuConfig: MenuGroup[] = [
         id: 'whisky-tasting-menu',
         label: '위스키/테이스팅 태그',
         icon: Wine,
+        roles: ['ROOT_ADMIN'],
         children: [
           {
             id: 'whisky-management',
@@ -72,6 +73,7 @@ export const menuConfig: MenuGroup[] = [
         id: 'banner-management',
         label: '배너 관리',
         icon: Image,
+        roles: ['ROOT_ADMIN'],
         children: [
           {
             id: 'banner-create',
@@ -96,6 +98,7 @@ export const menuConfig: MenuGroup[] = [
         id: 'inquiry-management',
         label: '문의 관리',
         icon: MessageSquare,
+        roles: ['ROOT_ADMIN'],
         children: [
           {
             id: 'inquiry-list',
@@ -115,6 +118,7 @@ export const menuConfig: MenuGroup[] = [
         label: '정책/방침 관리',
         icon: FileText,
         path: '/policies',
+        roles: ['ROOT_ADMIN'],
       },
     ],
   },
diff --git a/src/routes/index.tsx b/src/routes/index.tsx
index 41fdcf1..f5ca663 100644
--- a/src/routes/index.tsx
+++ b/src/routes/index.tsx
@@ -51,27 +51,79 @@ export function AppRoutes() {
         {/* Dashboard */}
         <Route index element={<DashboardPage />} />
 
-        {/* Whisky */}
-        <Route path="whisky">
-          <Route index element={<WhiskyListPage />} />
-          <Route path=":id" element={<WhiskyDetailPage />} />
-        </Route>
+        {/* Whisky - ROOT_ADMIN only */}
+        <Route
+          path="whisky"
+          element={
+            <RoleProtectedRoute roles={['ROOT_ADMIN']}>
+              <WhiskyListPage />
+            </RoleProtectedRoute>
+          }
+        />
+        <Route
+          path="whisky/:id"
+          element={
+            <RoleProtectedRoute roles={['ROOT_ADMIN']}>
+              <WhiskyDetailPage />
+            </RoleProtectedRoute>
+          }
+        />
 
-        {/* Tasting Tags */}
-        <Route path="tasting-tags" element={<TastingTagListPage />} />
+        {/* Tasting Tags - ROOT_ADMIN only */}
+        <Route
+          path="tasting-tags"
+          element={
+            <RoleProtectedRoute roles={['ROOT_ADMIN']}>
+              <TastingTagListPage />
+            </RoleProtectedRoute>
+          }
+        />
 
-        {/* Banners */}
-        <Route path="banners">
-          <Route index element={<BannerListPage />} />
-          <Route path="new" element={<BannerCreatePage />} />
-          <Route path=":id" element={<BannerDetailPage />} />
-        </Route>
+        {/* Banners - ROOT_ADMIN only */}
+        <Route
+          path="banners"
+          element={
+            <RoleProtectedRoute roles={['ROOT_ADMIN']}>
+              <BannerListPage />
+            </RoleProtectedRoute>
+          }
+        />
+        <Route
+          path="banners/new"
+          element={
+            <RoleProtectedRoute roles={['ROOT_ADMIN']}>
+              <BannerCreatePage />
+            </RoleProtectedRoute>
+          }
+        />
+        <Route
+          path="banners/:id"
+          element={
+            <RoleProtectedRoute roles={['ROOT_ADMIN']}>
+              <BannerDetailPage />
+            </RoleProtectedRoute>
+          }
+        />
 
-        {/* Inquiries */}
-        <Route path="inquiries" element={<InquiryListPage />} />
+        {/* Inquiries - ROOT_ADMIN only */}
+        <Route
+          path="inquiries"
+          element={
+            <RoleProtectedRoute roles={['ROOT_ADMIN']}>
+              <InquiryListPage />
+            </RoleProtectedRoute>
+          }
+        />
 
-        {/* Policies */}
-        <Route path="policies" element={<PolicyListPage />} />
+        {/* Policies - ROOT_ADMIN only */}
+        <Route
+          path="policies"
+          element={
+            <RoleProtectedRoute roles={['ROOT_ADMIN']}>
+              <PolicyListPage />
+            </RoleProtectedRoute>
+          }
+        />
 
         {/* Users - ROOT_ADMIN only */}
         <Route