15 phase 3 tournament add

backend/api/deps.py

@@ -34,3 +34,14 @@ async def get_current_user(
         raise credentials_exception
 
     return user
+
+
+async def get_current_superuser(
+    current_user: User = Depends(get_current_user),
+) -> User:
+    if not current_user.is_superuser:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail="Not enough privileges",
+        )
+    return current_user