diff --git a/adm/shop_admin/orderformupdate.php b/adm/shop_admin/orderformupdate.php
index 9c1a637d0..e57d6ff37 100644
--- a/adm/shop_admin/orderformupdate.php
+++ b/adm/shop_admin/orderformupdate.php
@@ -2,6 +2,8 @@
 $sub_menu = '400400';
 include_once('./_common.php');
 
+auth_check_menu($auth, $sub_menu, "w");
+
 check_admin_token();
 
 $od_shop_memo = isset($_POST['od_shop_memo']) ? addslashes(strip_tags(stripslashes($_POST['od_shop_memo']))) : '';
diff --git a/adm/shop_admin/orderlistdelete.php b/adm/shop_admin/orderlistdelete.php
index 3a0f9e62f..81009f757 100644
--- a/adm/shop_admin/orderlistdelete.php
+++ b/adm/shop_admin/orderlistdelete.php
@@ -4,6 +4,8 @@ include_once('./_common.php');
 
 //print_r2($_POST); exit;
 
+auth_check_menu($auth, $sub_menu, "d");
+
 check_admin_token();
 
 $count_post_chk = (isset($_POST['chk']) && is_array($_POST['chk'])) ? count($_POST['chk']) : 0;
diff --git a/adm/shop_admin/orderlistupdate.php b/adm/shop_admin/orderlistupdate.php
index 20929a3b1..c7b6c89b4 100644
--- a/adm/shop_admin/orderlistupdate.php
+++ b/adm/shop_admin/orderlistupdate.php
@@ -4,6 +4,8 @@ include_once('./_common.php');
 include_once('./admin.shop.lib.php');
 include_once(G5_LIB_PATH.'/mailer.lib.php');
 
+auth_check_menu($auth, $sub_menu, "w");
+
 check_admin_token();
 
 define("_ORDERMAIL_", true);