diff --git a/src/main/java/nlib/bbs/web/QnaController.java b/src/main/java/nlib/bbs/web/QnaController.java
index 94cab854..371a2658 100644
--- a/src/main/java/nlib/bbs/web/QnaController.java
+++ b/src/main/java/nlib/bbs/web/QnaController.java
@@ -15,6 +15,7 @@ import org.apache.commons.lang.StringEscapeUtils;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.annotation.Secured;
 import org.springframework.security.core.Authentication;
 import org.springframework.stereotype.Controller;
 import org.springframework.ui.ModelMap;
@@ -168,6 +169,7 @@ public class QnaController extends NlibCommonController {
 	 * @param req
 	 * @return
 	 */
+	@Secured("ROLE_USER")
 	@RequestMapping({"/bbs/insertQnaForm.do", "/bbs/updateQnaForm.do"})
 	public String insertQnaForm(
 			  HttpServletRequest request
@@ -213,6 +215,7 @@ public class QnaController extends NlibCommonController {
 	 * @param model
 	 * @return
 	 */
+	@Secured("ROLE_USER")
 	@RequestMapping("/bbs/insertQnaArticle.do")
 	public String insertQna(HttpServletRequest request
 			, Authentication authentication
@@ -332,6 +335,7 @@ public class QnaController extends NlibCommonController {
 	 * @param req
 	 * @return
 	 */
+	@Secured("ROLE_USER")
 	@RequestMapping("/bbs/updateQnaArticle.do")
 	public String updateQnaArticle(
 			HttpServletRequest request
@@ -504,6 +508,7 @@ public class QnaController extends NlibCommonController {
 	 * @param req
 	 * @return
 	 */
+	@Secured("ROLE_USER")
 	@RequestMapping("/bbs/deleteQnaArticle.do")
 	public String deleteQnaArticle(
 			HttpServletRequest request
diff --git a/src/main/java/nlib/cmm/web/NotificationController.java b/src/main/java/nlib/cmm/web/NotificationController.java
index c3d691b7..60177dd7 100644
--- a/src/main/java/nlib/cmm/web/NotificationController.java
+++ b/src/main/java/nlib/cmm/web/NotificationController.java
@@ -69,6 +69,7 @@ public class NotificationController extends NlibCommonController {
 	 * @param req
 	 * @return
 	 */
+	@Secured("ROLE_USER")
 	@RequestMapping("/cmm/listNotifications.do")
 	public String listNotifications(
 			HttpServletRequest req, 
@@ -158,6 +159,7 @@ public class NotificationController extends NlibCommonController {
 	 * @param req
 	 * @return
 	 */
+	@Secured("ROLE_USER")
 	@RequestMapping("/cmm/selectNotificationAjax.do")
 	public ResponseEntity<String> selectNotificationAjax(HttpServletRequest req, Authentication authentication, @RequestBody Map<String, String> paramMap) throws Exception {
 
diff --git a/src/main/java/nlib/col/web/CartController.java b/src/main/java/nlib/col/web/CartController.java
index 8a376d19..859fb843 100644
--- a/src/main/java/nlib/col/web/CartController.java
+++ b/src/main/java/nlib/col/web/CartController.java
@@ -12,6 +12,7 @@ import javax.servlet.http.HttpServletResponse;
 import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.annotation.Secured;
 import org.springframework.stereotype.Controller;
 import org.springframework.ui.ModelMap;
 import org.springframework.web.bind.annotation.RequestBody;
@@ -281,6 +282,7 @@ public class CartController extends NlibCommonController
      * @return
      * @throws Exception
      */
+    @Secured("ROLE_USER")
     @RequestMapping("/cart/mergeCartItemsAjax.do")
     public ResponseEntity<String> mergeCartItemsAjax(HttpServletRequest request, HttpServletResponse response, ModelMap model) throws Exception {
     	
diff --git a/src/main/java/nlib/user/web/UserInfoController.java b/src/main/java/nlib/user/web/UserInfoController.java
index e2cc30ef..c6599dd1 100644
--- a/src/main/java/nlib/user/web/UserInfoController.java
+++ b/src/main/java/nlib/user/web/UserInfoController.java
@@ -240,6 +240,7 @@ public class UserInfoController extends NlibCommonController {
 	 * @param model
 	 * @return
 	 */
+	@Secured("ROLE_USER")
 	@RequestMapping(value="/userInfo/getMemberQrcodeFormPopup.do")
 	public String getMemberQrcodeFormPopup(HttpServletRequest request, ModelMap model) {
 
@@ -262,6 +263,7 @@ public class UserInfoController extends NlibCommonController {
      * @return
      * @throws Exception
      */
+	@Secured("ROLE_USER")
     @RequestMapping(value="/userInfo/getMemberQrcode.do", produces=MediaType.IMAGE_JPEG_VALUE)
     public ResponseEntity<byte[]> getMemberQrcode(HttpServletRequest request, HttpServletResponse response) throws Exception {
 		
diff --git a/src/main/webapp/WEB-INF/jsp/nlib/cmm/listNotifications.jsp b/src/main/webapp/WEB-INF/jsp/nlib/cmm/listNotifications.jsp
index bb8d782f..7de2541a 100644
--- a/src/main/webapp/WEB-INF/jsp/nlib/cmm/listNotifications.jsp
+++ b/src/main/webapp/WEB-INF/jsp/nlib/cmm/listNotifications.jsp
@@ -196,7 +196,6 @@ $( document ).ready(function() {
                         <span class="count">총 <em name="itemsCount" id="itemsCount">0</em>건</span>
                         <div class="text">
                             <p>-  최근 한달동안 발송된 알림 내역만 보관됩니다.</p>
-                            <button type="button" name="btnSearch" id="btnSearch">새로고침</button>
                         </div>
                     </div>