diff --git a/backend/app/deps.py b/backend/app/deps.py
index c9b6331..b3b9f3c 100644
--- a/backend/app/deps.py
+++ b/backend/app/deps.py
@@ -29,3 +29,10 @@ def get_current_user(
     if user is None or not user.is_active:
         raise credentials_error
     return user
+
+
+def require_admin(user: models.User = Depends(get_current_user)) -> models.User:
+    """Разрешает endpoint только администратору."""
+    if user.role != models.UserRole.admin:
+        raise HTTPException(status_code=403, detail="Требуются права администратора")
+    return user