diff --git a/src/main/java/nlib/security/SpringSecurityConfig.java b/src/main/java/nlib/security/SpringSecurityConfig.java
index db798c38..201c580e 100644
--- a/src/main/java/nlib/security/SpringSecurityConfig.java
+++ b/src/main/java/nlib/security/SpringSecurityConfig.java
@@ -61,6 +61,8 @@ public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {
 	@Override
 	protected void configure(HttpSecurity http) throws Exception {
 		http.authorizeRequests()
+			.antMatchers("/**").permitAll();
+		/*
 			.antMatchers("/login/**").permitAll()
 			.antMatchers("/member/*.do").permitAll()
 			.antMatchers("/member/*.ajax").permitAll()
@@ -78,7 +80,7 @@ public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {
 			.antMatchers("/collection/*.do").permitAll()
 			.antMatchers("/sample/password/getSampleEncoder.do").permitAll()
 			.antMatchers("/sample/*.do").permitAll()
-			.antMatchers("/*/*Ajax.do").permitAll()
+			.antMatchers("/ * / *Ajax.do").permitAll()
 			.antMatchers("/fileupload/**").permitAll()
 			.antMatchers("/board/**").permitAll()
 			.antMatchers("/inform/**").permitAll()
@@ -97,7 +99,7 @@ public class SpringSecurityConfig extends WebSecurityConfigurerAdapter {
 			  .permitAll()
 		.and().csrf()
 			  .disable();
-		
+		*/
 		http.logout()
 			.logoutSuccessUrl("/login/loginCouncil.do?logout=logout")
 			.invalidateHttpSession(true).deleteCookies("JSESSIONID")