fix: solución de bloqueos y estandarización de permisos

backend/api/v1/modules/core/users/routes.py

@@ -52,7 +52,7 @@ def get_user_statistics(
     - Usuarios disponibles
     - Porcentaje de uso
     """
-    tenant_id = validate_access_to_resource(db, company_id, current_user)
+    tenant_id = validate_access_to_resource(db, company_id, current_user, required_permissions=["user.view"])
     service = UserService(db, tenant_id, company_id)
     return service.get_user_stats()
 
@@ -71,7 +71,7 @@ def list_users(
 
     Se puede filtrar por término de búsqueda (busca en username, email, nombre)
     """
-    tenant_id = validate_access_to_resource(db, company_id, current_user)
+    tenant_id = validate_access_to_resource(db, company_id, current_user, required_permissions=["user.view"])
     service = UserService(db, tenant_id, company_id)
     result = service.get_tenant_users(page=page, page_size=page_size, search=search)
     return result
@@ -245,7 +245,7 @@ def change_user_password(
     - temporary=True: Usuario debe cambiar la contraseña en el próximo login
     - temporary=False: Contraseña permanente
     """
-    tenant_id = validate_access_to_resource(db, company_id, current_user)
+    tenant_id = validate_access_to_resource(db, company_id, current_user, required_permissions=["user.update"])
     service = UserService(db, tenant_id, company_id)
     service.change_password(user_id, data.password, data.temporary)
     return {"message": "Password changed successfully"}