From 1ee4a0095ce45e251770aba3eb114dc1f76d05c5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=EA=B9=80=EB=B3=B4=EA=B3=A4?=
 <lightone2017@codebridge-x.com>
Date: Tue, 17 Mar 2026 13:07:07 +0900
Subject: [PATCH] =?UTF-8?q?feat:=20[finance]=20=EC=9D=BC=EB=B0=98=EC=A0=84?=
 =?UTF-8?q?=ED=91=9C=20=EB=AA=A9=EB=A1=9D=EC=97=90=EC=84=9C=20=EA=B4=80?=
 =?UTF-8?q?=EB=A6=AC=EC=9E=90=20=EC=82=AD=EC=A0=9C=20=EA=B8=B0=EB=8A=A5=20?=
 =?UTF-8?q?=EC=B6=94=EA=B0=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 목록 행에 삭제 아이콘 추가 (수정 아이콘 옆, 관리자에게만 표시)
- 컨트롤러 destroy()에 관리자 권한 검증 추가
- 은행거래/수동전표 모두 삭제 가능
---
 .../Finance/JournalEntryController.php        | 10 +++-
 .../views/finance/journal-entries.blade.php   | 57 ++++++++++++++++---
 2 files changed, 58 insertions(+), 9 deletions(-)

diff --git a/app/Http/Controllers/Finance/JournalEntryController.php b/app/Http/Controllers/Finance/JournalEntryController.php
index c8cb9d2c..3da24b19 100644
--- a/app/Http/Controllers/Finance/JournalEntryController.php
+++ b/app/Http/Controllers/Finance/JournalEntryController.php
@@ -333,10 +333,18 @@ public function update(Request $request, int $id): JsonResponse
     }
 
     /**
-     * 전표 삭제 (soft delete)
+     * 전표 삭제 (soft delete) — 관리자 이상만 가능
      */
     public function destroy(int $id): JsonResponse
     {
+        $user = auth()->user();
+        if (! $user || ! $user->isAdmin()) {
+            return response()->json([
+                'success' => false,
+                'message' => '전표 삭제는 관리자만 가능합니다.',
+            ], 403);
+        }
+
         $tenantId = session('selected_tenant_id', 1);
         $entry = JournalEntry::forTenant($tenantId)->findOrFail($id);
         $entry->delete();
diff --git a/resources/views/finance/journal-entries.blade.php b/resources/views/finance/journal-entries.blade.php
index 353f8d02..6812b5ab 100644
--- a/resources/views/finance/journal-entries.blade.php
+++ b/resources/views/finance/journal-entries.blade.php
@@ -16,6 +16,9 @@
 @push('scripts')
 @include('partials.react-cdn')
 <script src="https://unpkg.com/lucide@0.469.0?v={{ time() }}"></script>
+<script>
+    window.__IS_ADMIN = {{ auth()->user()->isAdmin() ? 'true' : 'false' }};
+</script>
 @verbatim
 <script type="text/babel">
 const { useState, useRef, useEffect, useCallback } = React;
@@ -1141,6 +1144,28 @@ className="px-2.5 py-1 text-xs font-medium bg-amber-100 text-amber-700 rounded-f
     const allJournaledCount = (journalStats.journaledCount || 0) + (cardJournalStats.journaledCount || 0);
     const allUnjournaledCount = (journalStats.unjournaledCount || 0) + (cardJournalStats.unjournaledCount || 0);
 
+    const isAdmin = window.__IS_ADMIN === true;
+
+    const handleDeleteEntry = async (journalId, description) => {
+        if (!journalId) return;
+        if (!confirm(`"${description}" 전표를 삭제하시겠습니까?`)) return;
+        try {
+            const res = await fetch(`/finance/journal-entries/${journalId}`, {
+                method: 'DELETE',
+                headers: { 'X-CSRF-TOKEN': CSRF_TOKEN },
+            });
+            const data = await res.json();
+            if (data.success) {
+                notify('전표가 삭제되었습니다.', 'success');
+                fetchData();
+            } else {
+                notify(data.message || '삭제 실패', 'error');
+            }
+        } catch (err) {
+            notify('삭제 중 오류가 발생했습니다.', 'error');
+        }
+    };
+
     const handleJournal = (tx) => {
         setModalTransaction(tx);
         setShowJournalModal(true);
@@ -1392,15 +1417,31 @@ className="px-2.5 py-1 text-xs font-medium bg-amber-100 text-amber-700 rounded-f
                                                     <Lock className="w-4 h-4" />
                                                 </span>
                                             ) : row.type === 'bank' && row.hasJournal ? (
-                                                <button onClick={() => onEdit(row.journalId)}
-                                                    className="p-1 text-stone-300 group-hover:text-emerald-500 hover:bg-emerald-50 rounded transition-colors" title="수정">
-                                                    <Edit3 className="w-4 h-4" />
-                                                </button>
+                                                <div className="flex items-center justify-center gap-0.5">
+                                                    <button onClick={() => onEdit(row.journalId)}
+                                                        className="p-1 text-stone-300 group-hover:text-emerald-500 hover:bg-emerald-50 rounded transition-colors" title="수정">
+                                                        <Edit3 className="w-4 h-4" />
+                                                    </button>
+                                                    {isAdmin && (
+                                                        <button onClick={() => handleDeleteEntry(row.journalId, row.description)}
+                                                            className="p-1 text-stone-300 group-hover:text-red-400 hover:bg-red-50 rounded transition-colors" title="삭제">
+                                                            <Trash2 className="w-4 h-4" />
+                                                        </button>
+                                                    )}
+                                                </div>
                                             ) : row.type === 'manual' && row.hasJournal ? (
-                                                <button onClick={() => onEdit(row.journalId)}
-                                                    className="p-1 text-stone-300 group-hover:text-emerald-500 hover:bg-emerald-50 rounded transition-colors" title="수정">
-                                                    <Edit3 className="w-4 h-4" />
-                                                </button>
+                                                <div className="flex items-center justify-center gap-0.5">
+                                                    <button onClick={() => onEdit(row.journalId)}
+                                                        className="p-1 text-stone-300 group-hover:text-emerald-500 hover:bg-emerald-50 rounded transition-colors" title="수정">
+                                                        <Edit3 className="w-4 h-4" />
+                                                    </button>
+                                                    {isAdmin && (
+                                                        <button onClick={() => handleDeleteEntry(row.journalId, row.description)}
+                                                            className="p-1 text-stone-300 group-hover:text-red-400 hover:bg-red-50 rounded transition-colors" title="삭제">
+                                                            <Trash2 className="w-4 h-4" />
+                                                        </button>
+                                                    )}
+                                                </div>
                                             ) : null}
                                         </td>
                                     </tr>