diff --git a/attached_assets/{E06132F4-6C50-43B0-9D78-292B3BE069A9}_1756798691204.png b/attached_assets/{E06132F4-6C50-43B0-9D78-292B3BE069A9}_1756798691204.png
new file mode 100644
index 0000000..bee65ac
Binary files /dev/null and b/attached_assets/{E06132F4-6C50-43B0-9D78-292B3BE069A9}_1756798691204.png differ
diff --git a/server/routes.ts b/server/routes.ts
index ec6e7bf..7c6a70d 100644
--- a/server/routes.ts
+++ b/server/routes.ts
@@ -2063,7 +2063,7 @@ export async function registerRoutes(app: Express): Promise<Server> {
   app.get('/api/users', isAuthenticated, async (req: any, res) => {
     try {
       const user = await storage.getUserWithGroups(req.user.claims ? req.user.claims.sub : req.user.id);
-      if (!user || user.role !== 'admin') {
+      if (!user || !['admin', 'directeur', 'manager'].includes(user.role)) {
         return res.status(403).json({ message: "Access denied" });
       }