Index: core-module/src/main/resources/egovframework/spring/com/context-security.xml
===================================================================
diff -u -r12b6534e89131e691485930223bf47136ee860d2 -rd8091e915837fefb4b1ab86c80cfa8bf366a2c3d
--- core-module/src/main/resources/egovframework/spring/com/context-security.xml	(.../context-security.xml)	(revision 12b6534e89131e691485930223bf47136ee860d2)
+++ core-module/src/main/resources/egovframework/spring/com/context-security.xml	(.../context-security.xml)	(revision d8091e915837fefb4b1ab86c80cfa8bf366a2c3d)
@@ -50,20 +50,20 @@
 		<property name="rememberMeServices" ref="rememberMeServices"/>
 	</bean>
 
-	<security:http pattern="/dwr/**" security="none"/>
+	<security:http pattern="/dwr/*" security="none"/>
 	<!-- Anyone can access these urls -->
-	<security:http pattern="/images/**" security="none"/>
+	<security:http pattern="/images/*" security="none"/>
 	<security:http pattern="/services/accessdenied" security="none"/>
 	<security:http pattern="/services/signup" security="none"/>
 	<security:http pattern="/services/user/register" security="none"/>
 
 	<security:http use-expressions="true" entry-point-ref="appAuthenticationEntryPoint">
 		<security:csrf/>
 
-		<security:intercept-url pattern="/api/rivalWar/ROLE_USER/**" access="hasRole('ROLE_USER')" />
-		<security:intercept-url pattern="/api/rivalWar/ROLE_ADMIN/**" access="hasAnyRole('ROLE_USER','ROLE_ADMIN')" />
+		<security:intercept-url pattern="/api/rivalWar/ROLE_USER/*" access="hasRole('ROLE_USER')" />
+		<security:intercept-url pattern="/api/rivalWar/ROLE_ADMIN/*" access="hasAnyRole('ROLE_USER','ROLE_ADMIN')" />
 
-		<security:intercept-url pattern="/auth/**" access="permitAll"/>
+		<security:intercept-url pattern="/auth/*" access="permitAll"/>
 		<security:intercept-url pattern="/j_spring_security_check" access="permitAll"/>
 
 		<security:intercept-url pattern="/" access="isAuthenticated()"/>