feature/permisos-reference-data

backend/api/v1/modules/public/reference_data/states/routes.py

@@ -8,11 +8,16 @@ from sqlalchemy import or_
 
 from .dto import StateDTO
 from .models import State
+from ..rbac import require_ref_view
 
 router = APIRouter(prefix="/states")
 
 
-@router.get("/", response_model=Dict[str, Any])
+@router.get(
+    "/",
+    response_model=Dict[str, Any],
+    dependencies=[Depends(require_ref_view("ref_states.view"))],
+)
 async def list_states(
     page: int = Query(1, ge=1, description="Número de página"),
     page_size: int = Query(50, ge=1, le=100, description="Tamaño de página"),
@@ -41,7 +46,11 @@ async def list_states(
     }
 
 
-@router.get("/{m3_key}", response_model=StateDTO)
+@router.get(
+    "/{m3_key}",
+    response_model=StateDTO,
+    dependencies=[Depends(require_ref_view("ref_states.view"))],
+)
 async def get_state(
     m3_key: str,
     db: Session = Depends(get_core_db),