Fixed permission management

Merge pull request 'Improvements' (#9 ) from dev-4.5.1 into main
Reviewed-on: #9
2026-06-23 18:46:01 +02:00 · 2026-06-22 21:08:28 +02:00 · 2026-06-22 21:07:53 +02:00 · 2026-06-21 23:31:26 +02:00 · 2026-06-21 22:13:23 +02:00 · 2026-06-21 22:12:05 +02:00
106 changed files with 4242 additions and 145 deletions
@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Domains\Admin\Actions\CreateTenant;
+
+use App\Models\Tenant;
+
+class CreateTenantAction
+{
+    public function __construct(private CreateTenantRequest $request)
+    {
+    }
+
+    public function execute(): CreateTenantResponse
+    {
+        $response = new CreateTenantResponse();
+
+        $tenant = Tenant::create([
+            'name' => $this->request->name,
+            'slug' => $this->request->slug,
+            'url' => $this->request->url,
+            'email' => '',
+            'email_finance' => '',
+            'account_name' => '',
+            'account_iban' => '',
+            'account_bic' => '',
+            'city' => '',
+            'postcode' => '',
+            'is_active_local_group' => true,
+            'has_active_instance' => true,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Stamm wurde angelegt.';
+        $response->slug = $tenant->slug;
+
+        return $response;
+    }
+}
@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Domains\Admin\Actions\CreateTenant;
+
+class CreateTenantRequest
+{
+    public function __construct(
+        public string $name,
+        public string $slug,
+        public string $url,
+    ) {
+    }
+}
@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Domains\Admin\Actions\CreateTenant;
+
+class CreateTenantResponse
+{
+    public bool $success = false;
+    public string $message = '';
+    public ?string $slug = null;
+}
@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Actions\ToggleUserActive;
+
+class ToggleUserActiveAction
+{
+    public function __construct(private ToggleUserActiveRequest $request)
+    {
+    }
+
+    public function execute(): ToggleUserActiveResponse
+    {
+        $response = new ToggleUserActiveResponse();
+
+        if ($this->request->currentUserId === $this->request->user->id) {
+            $response->message = 'Du kannst dich nicht selbst deaktivieren.';
+            return $response;
+        }
+
+        $this->request->user->update(['active' => !$this->request->user->active]);
+
+        $status = $this->request->user->active ? 'aktiviert' : 'deaktiviert';
+
+        $response->success = true;
+        $response->message = 'Benutzer*in wurde ' . $status . '.';
+        $response->active = $this->request->user->active;
+
+        return $response;
+    }
+}
@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Domains\Admin\Actions\ToggleUserActive;
+
+use App\Models\User;
+
+class ToggleUserActiveRequest
+{
+    public function __construct(
+        public User $user,
+        public int $currentUserId,
+    ) {
+    }
+}
@@ -0,0 +1,10 @@
+<?php
+
+namespace App\Domains\Admin\Actions\ToggleUserActive;
+
+class ToggleUserActiveResponse
+{
+    public bool $success = false;
+    public string $message = '';
+    public ?bool $active = null;
+}
@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantContact;
+
+class UpdateTenantContactAction
+{
+    public function __construct(private UpdateTenantContactRequest $request)
+    {
+    }
+
+    public function execute(): UpdateTenantContactResponse
+    {
+        $response = new UpdateTenantContactResponse();
+
+        $this->request->tenant->update([
+            'email' => $this->request->email,
+            'email_finance' => $this->request->emailFinance,
+            'postcode' => $this->request->postcode,
+            'city' => $this->request->city,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Kontaktdaten wurden gespeichert.';
+
+        return $response;
+    }
+}
@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantContact;
+
+use App\Models\Tenant;
+
+class UpdateTenantContactRequest
+{
+    public function __construct(
+        public Tenant $tenant,
+        public string $email,
+        public string $emailFinance,
+        public string $postcode,
+        public string $city,
+    ) {
+    }
+}
@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantContact;
+
+class UpdateTenantContactResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}
@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGdpr;
+
+class UpdateTenantGdprAction
+{
+    public function __construct(private UpdateTenantGdprRequest $request)
+    {
+    }
+
+    public function execute(): UpdateTenantGdprResponse
+    {
+        $response = new UpdateTenantGdprResponse();
+
+        $this->request->tenant->update([
+            'gdpr_text' => $this->request->gdprText,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Datenschutzerklärung wurde gespeichert.';
+
+        return $response;
+    }
+}
@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGdpr;
+
+use App\Models\Tenant;
+
+class UpdateTenantGdprRequest
+{
+    public function __construct(
+        public Tenant $tenant,
+        public string $gdprText,
+    ) {
+    }
+}
@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGdpr;
+
+class UpdateTenantGdprResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}
@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGeneral;
+
+class UpdateTenantGeneralAction
+{
+    public function __construct(private UpdateTenantGeneralRequest $request)
+    {
+    }
+
+    public function execute(): UpdateTenantGeneralResponse
+    {
+        $response = new UpdateTenantGeneralResponse();
+
+        $this->request->tenant->update([
+            'name' => $this->request->name,
+            'slug' => $this->request->slug,
+            'url' => $this->request->url,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Allgemeine Daten wurden gespeichert.';
+
+        return $response;
+    }
+}
@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGeneral;
+
+use App\Models\Tenant;
+
+class UpdateTenantGeneralRequest
+{
+    public function __construct(
+        public Tenant $tenant,
+        public string $name,
+        public string $slug,
+        public string $url,
+    ) {
+    }
+}
@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantGeneral;
+
+class UpdateTenantGeneralResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}
@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantImpress;
+
+class UpdateTenantImpressAction
+{
+    public function __construct(private UpdateTenantImpressRequest $request)
+    {
+    }
+
+    public function execute(): UpdateTenantImpressResponse
+    {
+        $response = new UpdateTenantImpressResponse();
+
+        $this->request->tenant->update([
+            'impress_text' => $this->request->impressText,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Impressum wurde gespeichert.';
+
+        return $response;
+    }
+}
@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantImpress;
+
+use App\Models\Tenant;
+
+class UpdateTenantImpressRequest
+{
+    public function __construct(
+        public Tenant $tenant,
+        public string $impressText,
+    ) {
+    }
+}
@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantImpress;
+
+class UpdateTenantImpressResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}
@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantPayment;
+
+class UpdateTenantPaymentAction
+{
+    public function __construct(private UpdateTenantPaymentRequest $request)
+    {
+    }
+
+    public function execute(): UpdateTenantPaymentResponse
+    {
+        $response = new UpdateTenantPaymentResponse();
+
+        $this->request->tenant->update([
+            'account_iban' => $this->request->accountIban,
+            'account_bic' => $this->request->accountBic,
+            'account_name' => $this->request->accountName,
+        ]);
+
+        $response->success = true;
+        $response->message = 'Bezahldaten wurden gespeichert.';
+
+        return $response;
+    }
+}
@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantPayment;
+
+use App\Models\Tenant;
+
+class UpdateTenantPaymentRequest
+{
+    public function __construct(
+        public Tenant $tenant,
+        public string $accountIban,
+        public string $accountBic,
+        public string $accountName,
+    ) {
+    }
+}
@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateTenantPayment;
+
+class UpdateTenantPaymentResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}
@@ -0,0 +1,39 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateUser;
+
+class UpdateUserAction
+{
+    public function __construct(private UpdateUserRequest $request)
+    {
+    }
+
+    public function execute(): UpdateUserResponse
+    {
+        $response = new UpdateUserResponse();
+
+        $allowedFields = [
+            'firstname', 'lastname', 'nickname', 'email', 'phone', 'birthday',
+            'membership_id', 'address_1', 'address_2', 'postcode', 'city',
+            'eating_habits', 'swimming_permission', 'first_aid_permission',
+            'bank_account_owner', 'bank_account_iban',
+            'medications', 'allergies', 'intolerances',
+            'user_role_local_group',
+        ];
+
+        if ($this->request->isLvTenant) {
+            $allowedFields[] = 'local_group';
+            if (!$this->request->isOwnUser) {
+                $allowedFields[] = 'user_role_main';
+            }
+        }
+
+        $data = array_intersect_key($this->request->data, array_flip($allowedFields));
+        $this->request->user->update($data);
+
+        $response->success = true;
+        $response->message = 'Benutzerdaten wurden gespeichert.';
+
+        return $response;
+    }
+}
@@ -0,0 +1,16 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateUser;
+
+use App\Models\User;
+
+class UpdateUserRequest
+{
+    public function __construct(
+        public User $user,
+        public array $data,
+        public bool $isOwnUser,
+        public bool $isLvTenant,
+    ) {
+    }
+}
@@ -0,0 +1,9 @@
+<?php
+
+namespace App\Domains\Admin\Actions\UpdateUser;
+
+class UpdateUserResponse
+{
+    public bool $success = false;
+    public string $message = '';
+}
@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class AdminDashboardController extends CommonController
+{
+    public function __invoke(Request $request): Response
+    {
+        $inertiaProvider = new InertiaProvider('Admin/Dashboard', []);
+        return $inertiaProvider->render();
+    }
+}
@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantContactGetController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        return response()->json([
+            'email' => $tenant->email,
+            'email_finance' => $tenant->email_finance,
+            'postcode' => $tenant->postcode,
+            'city' => $tenant->city,
+            'saveEndpoint' => '/api/v1/admin/tenants/' . $slug . '/contact',
+        ]);
+    }
+}
@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantContact\UpdateTenantContactAction;
+use App\Domains\Admin\Actions\UpdateTenantContact\UpdateTenantContactRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantContactUpdateController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $action = new UpdateTenantContactAction(new UpdateTenantContactRequest(
+            tenant: $tenant,
+            email: $request->input('email'),
+            emailFinance: $request->input('email_finance'),
+            postcode: $request->input('postcode'),
+            city: $request->input('city'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}
@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantGdprGetController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        return response()->json([
+            'gdpr_text' => $tenant->gdpr_text ?? '',
+            'saveEndpoint' => '/api/v1/admin/tenants/' . $slug . '/gdpr',
+        ]);
+    }
+}
@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantGdpr\UpdateTenantGdprAction;
+use App\Domains\Admin\Actions\UpdateTenantGdpr\UpdateTenantGdprRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantGdprUpdateController extends CommonController
+{
+
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $action = new UpdateTenantGdprAction(new UpdateTenantGdprRequest(
+            tenant: $tenant,
+            gdprText: $request->input('gdpr_text'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}
@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantImpressGetController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        return response()->json([
+            'impress_text' => $tenant->impress_text ?? '',
+            'saveEndpoint' => '/api/v1/admin/tenants/' . $slug . '/impress',
+        ]);
+    }
+}
@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantImpress\UpdateTenantImpressAction;
+use App\Domains\Admin\Actions\UpdateTenantImpress\UpdateTenantImpressRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantImpressUpdateController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $action = new UpdateTenantImpressAction(new UpdateTenantImpressRequest(
+            tenant: $tenant,
+            impressText: $request->input('impress_text'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}
@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantPaymentGetController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        return response()->json([
+            'account_iban' => $tenant->account_iban,
+            'account_bic' => $tenant->account_bic,
+            'account_name' => $tenant->account_name,
+            'saveEndpoint' => '/api/v1/admin/tenants/' . $slug . '/payment',
+        ]);
+    }
+}
@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantPayment\UpdateTenantPaymentAction;
+use App\Domains\Admin\Actions\UpdateTenantPayment\UpdateTenantPaymentRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class ManagedTenantPaymentUpdateController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $action = new UpdateTenantPaymentAction(new UpdateTenantPaymentRequest(
+            tenant: $tenant,
+            accountIban: $request->input('account_iban'),
+            accountBic: $request->input('account_bic'),
+            accountName: $request->input('account_name'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}
@@ -0,0 +1,21 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantContactGetController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        return response()->json([
+            'email' => $this->tenant->email,
+            'email_finance' => $this->tenant->email_finance,
+            'postcode' => $this->tenant->postcode,
+            'city' => $this->tenant->city,
+            'saveEndpoint' => '/api/v1/admin/tenant/contact',
+        ]);
+    }
+}
@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantContact\UpdateTenantContactAction;
+use App\Domains\Admin\Actions\UpdateTenantContact\UpdateTenantContactRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantContactUpdateController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $action = new UpdateTenantContactAction(new UpdateTenantContactRequest(
+            tenant: $this->tenant,
+            email: $request->input('email'),
+            emailFinance: $request->input('email_finance'),
+            postcode: $request->input('postcode'),
+            city: $request->input('city'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}
@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\CreateTenant\CreateTenantAction;
+use App\Domains\Admin\Actions\CreateTenant\CreateTenantRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantCreateController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $action = new CreateTenantAction(new CreateTenantRequest(
+            name: $request->input('name'),
+            slug: $request->input('slug'),
+            url: $request->input('url'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+            'slug' => $response->slug,
+        ]);
+    }
+}
@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class TenantEditPageController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): Response
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $inertiaProvider = new InertiaProvider('Admin/TenantEdit', [
+            'tenant' => [
+                'name' => $tenant->name,
+                'slug' => $tenant->slug,
+                'url' => $tenant->url,
+                'is_active_local_group' => $tenant->is_active_local_group,
+            ],
+        ]);
+        return $inertiaProvider->render();
+    }
+}
@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantGdprGetController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        return response()->json([
+            'gdpr_text' => $this->tenant->gdpr_text ?? '',
+            'saveEndpoint' => '/api/v1/admin/tenant/gdpr',
+        ]);
+    }
+}
@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantGdpr\UpdateTenantGdprAction;
+use App\Domains\Admin\Actions\UpdateTenantGdpr\UpdateTenantGdprRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantGdprUpdateController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $action = new UpdateTenantGdprAction(new UpdateTenantGdprRequest(
+            tenant: $this->tenant,
+            gdprText: $request->input('gdpr_text'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}
@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantGeneralGetController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        return response()->json([
+            'name' => $tenant->name,
+            'slug' => $tenant->slug,
+            'url' => $tenant->url,
+            'is_active_local_group' => $tenant->is_active_local_group,
+            'saveEndpoint' => '/api/v1/admin/tenants/' . $slug . '/general',
+        ]);
+    }
+}
@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantGeneral\UpdateTenantGeneralAction;
+use App\Domains\Admin\Actions\UpdateTenantGeneral\UpdateTenantGeneralRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantGeneralUpdateController extends CommonController
+{
+    public function __invoke(string $slug, Request $request): JsonResponse
+    {
+        $tenant = $this->adminTenants->findBySlug($slug);
+
+        $action = new UpdateTenantGeneralAction(new UpdateTenantGeneralRequest(
+            tenant: $tenant,
+            name: $request->input('name'),
+            slug: $request->input('slug'),
+            url: $request->input('url'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}
@@ -0,0 +1,18 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantImpressGetController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        return response()->json([
+            'impress_text' => $this->tenant->impress_text ?? '',
+            'saveEndpoint' => '/api/v1/admin/tenant/impress',
+        ]);
+    }
+}
@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantImpress\UpdateTenantImpressAction;
+use App\Domains\Admin\Actions\UpdateTenantImpress\UpdateTenantImpressRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantImpressUpdateController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $action = new UpdateTenantImpressAction(new UpdateTenantImpressRequest(
+            tenant: $this->tenant,
+            impressText: $request->input('impress_text'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}
@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantListApiController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $tenants = $this->adminTenants->getActiveTenants();
+
+        $mapped = $tenants->map(function ($tenant) {
+            return [
+                'name' => $tenant->name,
+                'slug' => $tenant->slug,
+                'url' => $tenant->url,
+                'is_active_local_group' => $tenant->is_active_local_group,
+            ];
+        });
+
+        return response()->json(['tenants' => $mapped]);
+    }
+}
@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class TenantListPageController extends CommonController
+{
+    public function __invoke(Request $request): Response
+    {
+        $inertiaProvider = new InertiaProvider('Admin/TenantList', []);
+        return $inertiaProvider->render();
+    }
+}
@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class TenantPageController extends CommonController
+{
+    public function __invoke(Request $request): Response
+    {
+        $inertiaProvider = new InertiaProvider('Admin/TenantData', [
+            'tenant' => [
+                'name' => $this->tenant->name,
+                'slug' => $this->tenant->slug,
+                'url' => $this->tenant->url,
+                'is_active_local_group' => $this->tenant->is_active_local_group,
+            ],
+        ]);
+        return $inertiaProvider->render();
+    }
+}
@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantPaymentGetController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        return response()->json([
+            'account_iban' => $this->tenant->account_iban,
+            'account_bic' => $this->tenant->account_bic,
+            'account_name' => $this->tenant->account_name,
+            'saveEndpoint' => '/api/v1/admin/tenant/payment',
+        ]);
+    }
+}
@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateTenantPayment\UpdateTenantPaymentAction;
+use App\Domains\Admin\Actions\UpdateTenantPayment\UpdateTenantPaymentRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class TenantPaymentUpdateController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $action = new UpdateTenantPaymentAction(new UpdateTenantPaymentRequest(
+            tenant: $this->tenant,
+            accountIban: $request->input('account_iban'),
+            accountBic: $request->input('account_bic'),
+            accountName: $request->input('account_name'),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}
@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Enumerations\UserRole;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class UserDetailGetController extends CommonController
+{
+    public function __invoke(int $id, Request $request): JsonResponse
+    {
+        $user = $this->adminUsers->findById($id);
+
+        $userData = $user->toArray();
+        unset($userData['password'], $userData['remember_token'], $userData['activation_token'], $userData['activation_token_expires_at']);
+
+        $tenantNames = $this->adminTenants->getTenantNames();
+        $userData['nicename'] = $user->getNicename();
+        $userData['fullname'] = $user->getFullName();
+        $userData['local_group_name'] = $tenantNames[$user->local_group] ?? $user->local_group;
+
+        return response()->json([
+            'user' => $userData,
+            'isOwnUser' => auth()->id() === $user->id,
+            'isLvTenant' => $this->tenant->slug === 'lv',
+            'userRoles' => UserRole::all()->map(fn($role) => ['slug' => $role->slug, 'name' => $role->name]),
+            'localGroups' => $this->adminTenants->getActiveLocalGroups()->map(fn($t) => ['slug' => $t->slug, 'name' => $t->name]),
+        ]);
+    }
+}
@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class UserListApiController extends CommonController
+{
+    public function __invoke(Request $request): JsonResponse
+    {
+        $tenantNames = $this->adminTenants->getTenantNames();
+        $users = $this->adminUsers->getListForTenant($this->tenant->slug);
+
+        $mapped = $users->map(function ($user) use ($tenantNames) {
+            return [
+                'id' => $user->id,
+                'firstname' => $user->firstname,
+                'lastname' => $user->lastname,
+                'nickname' => $user->nickname,
+                'local_group' => $user->local_group,
+                'local_group_name' => $tenantNames[$user->local_group] ?? $user->local_group,
+                'active' => $user->active,
+            ];
+        });
+
+        return response()->json(['users' => $mapped]);
+    }
+}
@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class UserListPageController extends CommonController
+{
+    public function __invoke(Request $request): Response
+    {
+        $inertiaProvider = new InertiaProvider('Admin/UserList', [
+            'isLvTenant' => $this->tenant->slug === 'lv',
+        ]);
+        return $inertiaProvider->render();
+    }
+}
@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\UserManagement\Actions\GenerateActivationToken\GenerateActivationTokenCommand;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class UserResetPasswordController extends CommonController
+{
+    public function __invoke(int $id, Request $request): JsonResponse
+    {
+        $user = $this->adminUsers->findById($id);
+
+        if (!$user->email) {
+            return response()->json([
+                'status' => 'error',
+                'message' => 'Benutzer*in hat keine E-Mail-Adresse hinterlegt.',
+            ]);
+        }
+
+        $command = new GenerateActivationTokenCommand($user);
+        $command->execute();
+
+        return response()->json([
+            'status' => 'success',
+            'message' => 'Passwort-Reset-Mail wurde gesendet.',
+        ]);
+    }
+}
@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\ToggleUserActive\ToggleUserActiveAction;
+use App\Domains\Admin\Actions\ToggleUserActive\ToggleUserActiveRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class UserToggleActiveController extends CommonController
+{
+    public function __invoke(int $id, Request $request): JsonResponse
+    {
+        $user = $this->adminUsers->findById($id);
+
+        $action = new ToggleUserActiveAction(new ToggleUserActiveRequest(
+            user: $user,
+            currentUserId: auth()->id(),
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+            'active' => $response->active,
+        ]);
+    }
+}
@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Domains\Admin\Controllers;
+
+use App\Domains\Admin\Actions\UpdateUser\UpdateUserAction;
+use App\Domains\Admin\Actions\UpdateUser\UpdateUserRequest;
+use App\Scopes\CommonController;
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+
+class UserUpdateController extends CommonController
+{
+    public function __invoke(int $id, Request $request): JsonResponse
+    {
+        $user = $this->adminUsers->findById($id);
+
+        $action = new UpdateUserAction(new UpdateUserRequest(
+            user: $user,
+            data: $request->all(),
+            isOwnUser: auth()->id() === $user->id,
+            isLvTenant: $this->tenant->slug === 'lv',
+        ));
+
+        $response = $action->execute();
+
+        return response()->json([
+            'status' => $response->success ? 'success' : 'error',
+            'message' => $response->message,
+        ]);
+    }
+}
@@ -0,0 +1,30 @@
+<?php
+
+namespace App\Domains\Admin\Repositories;
+
+use App\Models\Tenant;
+use Illuminate\Database\Eloquent\Collection;
+use Illuminate\Support\Collection as SupportCollection;
+
+class AdminTenantRepository
+{
+    public function findBySlug(string $slug): Tenant
+    {
+        return Tenant::where('slug', $slug)->firstOrFail();
+    }
+
+    public function getActiveTenants(): Collection
+    {
+        return Tenant::where('has_active_instance', true)->get();
+    }
+
+    public function getTenantNames(): SupportCollection
+    {
+        return Tenant::pluck('name', 'slug');
+    }
+
+    public function getActiveLocalGroups(): Collection
+    {
+        return Tenant::where('is_active_local_group', true)->get();
+    }
+}
@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Domains\Admin\Repositories;
+
+use App\Models\User;
+use Illuminate\Database\Eloquent\Collection;
+
+class AdminUserRepository
+{
+    public function findById(int $id): User
+    {
+        return User::findOrFail($id);
+    }
+
+    public function getListForTenant(string $tenantSlug): Collection
+    {
+        $query = User::query();
+
+        if ($tenantSlug !== 'lv') {
+            $query->where('local_group', $tenantSlug);
+        }
+
+        return $query->orderBy('lastname')->orderBy('firstname')->get();
+    }
+}
@@ -0,0 +1,71 @@
+<?php
+
+use App\Domains\Admin\Controllers\UserDetailGetController;
+use App\Domains\Admin\Controllers\UserListApiController;
+use App\Domains\Admin\Controllers\UserResetPasswordController;
+use App\Domains\Admin\Controllers\UserToggleActiveController;
+use App\Domains\Admin\Controllers\UserUpdateController;
+use App\Domains\Admin\Controllers\ManagedTenantContactGetController;
+use App\Domains\Admin\Controllers\ManagedTenantContactUpdateController;
+use App\Domains\Admin\Controllers\ManagedTenantGdprGetController;
+use App\Domains\Admin\Controllers\ManagedTenantGdprUpdateController;
+use App\Domains\Admin\Controllers\ManagedTenantImpressGetController;
+use App\Domains\Admin\Controllers\ManagedTenantImpressUpdateController;
+use App\Domains\Admin\Controllers\ManagedTenantPaymentGetController;
+use App\Domains\Admin\Controllers\ManagedTenantPaymentUpdateController;
+use App\Domains\Admin\Controllers\TenantContactGetController;
+use App\Domains\Admin\Controllers\TenantContactUpdateController;
+use App\Domains\Admin\Controllers\TenantCreateController;
+use App\Domains\Admin\Controllers\TenantGdprGetController;
+use App\Domains\Admin\Controllers\TenantGdprUpdateController;
+use App\Domains\Admin\Controllers\TenantGeneralGetController;
+use App\Domains\Admin\Controllers\TenantGeneralUpdateController;
+use App\Domains\Admin\Controllers\TenantImpressGetController;
+use App\Domains\Admin\Controllers\TenantImpressUpdateController;
+use App\Domains\Admin\Controllers\TenantListApiController;
+use App\Domains\Admin\Controllers\TenantPaymentGetController;
+use App\Domains\Admin\Controllers\TenantPaymentUpdateController;
+use App\Middleware\AdminRoleMiddleware;
+use App\Middleware\IdentifyTenant;
+use App\Middleware\LvOnlyMiddleware;
+use Illuminate\Support\Facades\Route;
+
+Route::middleware([IdentifyTenant::class, 'auth', AdminRoleMiddleware::class])->group(function () {
+    Route::prefix('api/v1/admin/tenant')->group(function () {
+        Route::get('/contact', TenantContactGetController::class);
+        Route::post('/contact', TenantContactUpdateController::class);
+        Route::get('/payment', TenantPaymentGetController::class);
+        Route::post('/payment', TenantPaymentUpdateController::class);
+        Route::get('/impress', TenantImpressGetController::class);
+        Route::post('/impress', TenantImpressUpdateController::class);
+        Route::get('/gdpr', TenantGdprGetController::class);
+        Route::post('/gdpr', TenantGdprUpdateController::class);
+    });
+
+    Route::prefix('api/v1/admin/users')->group(function () {
+        Route::get('/list', UserListApiController::class);
+        Route::get('/{id}', UserDetailGetController::class);
+        Route::post('/{id}', UserUpdateController::class);
+        Route::post('/{id}/toggle-active', UserToggleActiveController::class);
+        Route::post('/{id}/reset-password', UserResetPasswordController::class);
+    });
+
+    Route::middleware(LvOnlyMiddleware::class)->group(function () {
+        Route::prefix('api/v1/admin/tenants')->group(function () {
+            Route::get('/list', TenantListApiController::class);
+            Route::post('/create', TenantCreateController::class);
+            Route::prefix('/{slug}')->group(function () {
+                Route::get('/general', TenantGeneralGetController::class);
+                Route::post('/general', TenantGeneralUpdateController::class);
+                Route::get('/contact', ManagedTenantContactGetController::class);
+                Route::post('/contact', ManagedTenantContactUpdateController::class);
+                Route::get('/payment', ManagedTenantPaymentGetController::class);
+                Route::post('/payment', ManagedTenantPaymentUpdateController::class);
+                Route::get('/impress', ManagedTenantImpressGetController::class);
+                Route::post('/impress', ManagedTenantImpressUpdateController::class);
+                Route::get('/gdpr', ManagedTenantGdprGetController::class);
+                Route::post('/gdpr', ManagedTenantGdprUpdateController::class);
+            });
+        });
+    });
+});
@@ -0,0 +1,24 @@
+<?php
+
+use App\Domains\Admin\Controllers\AdminDashboardController;
+use App\Domains\Admin\Controllers\TenantEditPageController;
+use App\Domains\Admin\Controllers\TenantListPageController;
+use App\Domains\Admin\Controllers\TenantPageController;
+use App\Domains\Admin\Controllers\UserListPageController;
+use App\Middleware\AdminRoleMiddleware;
+use App\Middleware\IdentifyTenant;
+use App\Middleware\LvOnlyMiddleware;
+use Illuminate\Support\Facades\Route;
+
+Route::middleware([IdentifyTenant::class, 'auth', AdminRoleMiddleware::class])->group(function () {
+    Route::prefix('admin')->group(function () {
+        Route::get('/', AdminDashboardController::class);
+        Route::get('/tenant', TenantPageController::class);
+        Route::get('/users', UserListPageController::class);
+
+        Route::middleware(LvOnlyMiddleware::class)->group(function () {
+            Route::get('/tenants', TenantListPageController::class);
+            Route::get('/tenants/{slug}', TenantEditPageController::class);
+        });
+    });
+});
@@ -0,0 +1,15 @@
+<script setup>
+import AdminAppLayout from "../../../../resources/js/layouts/AdminAppLayout.vue";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+</script>
+
+<template>
+    <AdminAppLayout title="Administration">
+        <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
+            <h2>Administration</h2>
+        </shadowed-box>
+    </AdminAppLayout>
+</template>
+
+<style scoped>
+</style>
@@ -0,0 +1,146 @@
+<script setup>
+import { ref } from 'vue';
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const props = defineProps({
+    data: {
+        type: Object,
+        default: () => ({})
+    },
+})
+
+const { request } = useAjax()
+
+const editing = ref(false)
+const form = ref({
+    email: props.data.email ?? '',
+    email_finance: props.data.email_finance ?? '',
+    postcode: props.data.postcode ?? '',
+    city: props.data.city ?? '',
+})
+
+async function save() {
+    const saveUrl = props.data.saveEndpoint ?? '/api/v1/admin/tenant/contact'
+    const response = await request(saveUrl, {
+        method: 'POST',
+        body: form.value,
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        editing.value = false
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+</script>
+
+<template>
+    <div v-if="!editing">
+        <table class="data-table">
+            <tr><th>Email:</th><td>{{ form.email }}</td></tr>
+            <tr><th>Email Schatzmeister*in:</th><td>{{ form.email_finance }}</td></tr>
+            <tr><th>Postleitzahl:</th><td>{{ form.postcode }}</td></tr>
+            <tr><th>Ort:</th><td>{{ form.city }}</td></tr>
+        </table>
+        <button class="btn-edit" @click="editing = true">Bearbeiten</button>
+    </div>
+
+    <div v-else>
+        <table class="data-table">
+            <tr>
+                <th>Email:</th>
+                <td><input type="email" v-model="form.email" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>Email Schatzmeister*in:</th>
+                <td><input type="email" v-model="form.email_finance" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>Postleitzahl:</th>
+                <td><input type="text" v-model="form.postcode" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>Ort:</th>
+                <td><input type="text" v-model="form.city" class="form-input" /></td>
+            </tr>
+        </table>
+        <div class="btn-group">
+            <button class="btn-save" @click="save">Speichern</button>
+            <button class="btn-cancel" @click="editing = false">Abbrechen</button>
+        </div>
+    </div>
+</template>
+
+<style scoped>
+.data-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.data-table th {
+    text-align: left;
+    padding: 8px 12px;
+    width: 200px;
+    color: #374151;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.data-table td {
+    padding: 8px 12px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.form-input {
+    width: 100%;
+    padding: 6px 10px;
+    border: 1px solid #d1d5db;
+    border-radius: 6px;
+    font-size: 0.95rem;
+    box-sizing: border-box;
+}
+
+.btn-edit, .btn-save, .btn-cancel {
+    margin-top: 15px;
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+}
+
+.btn-edit {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-edit:hover {
+    background-color: #163a7a;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-cancel {
+    background-color: #e5e7eb;
+    color: #374151;
+    margin-left: 10px;
+}
+
+.btn-cancel:hover {
+    background-color: #d1d5db;
+}
+
+.btn-group {
+    display: flex;
+    gap: 10px;
+}
+</style>
@@ -0,0 +1,87 @@
+<script setup>
+import { ref } from 'vue';
+import TextEditor from "../../../../Views/Components/TextEditor.vue";
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+import gdprTemplate from "../../../../../resources/templates/gdpr-template.html?raw";
+
+const props = defineProps({
+    data: {
+        type: Object,
+        default: () => ({})
+    },
+})
+
+const { request } = useAjax()
+
+const content = ref(props.data.gdpr_text ?? '')
+
+function autoGenerate() {
+    if (content.value && content.value.trim() !== '') {
+        toast.error('Der Editor ist nicht leer. Bitte leere den Inhalt zuerst, um die Vorlage zu verwenden.')
+        return
+    }
+
+    const today = new Date().toLocaleDateString('de-DE', { day: '2-digit', month: '2-digit', year: 'numeric' })
+    content.value = gdprTemplate.replace('[Datum]', today)
+}
+
+async function save() {
+    const saveUrl = props.data.saveEndpoint ?? '/api/v1/admin/tenant/gdpr'
+    const response = await request(saveUrl, {
+        method: 'POST',
+        body: { gdpr_text: content.value },
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+</script>
+
+<template>
+    <div>
+        <TextEditor v-model="content" />
+        <div class="btn-group">
+            <button class="btn-save" @click="save">Speichern</button>
+            <button class="btn-generate" @click="autoGenerate">Auto-generieren</button>
+        </div>
+    </div>
+</template>
+
+<style scoped>
+.btn-group {
+    display: flex;
+    gap: 10px;
+    margin-top: 15px;
+}
+
+.btn-save, .btn-generate {
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-generate {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-generate:hover {
+    background-color: #163a7a;
+}
+</style>
@@ -0,0 +1,157 @@
+<script setup>
+import { ref } from 'vue';
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const props = defineProps({
+    data: {
+        type: Object,
+        default: () => ({})
+    },
+})
+
+const { request } = useAjax()
+
+const editing = ref(false)
+const form = ref({
+    name: props.data.name ?? '',
+    slug: props.data.slug ?? '',
+    url: props.data.url ?? '',
+})
+
+async function save() {
+    const saveUrl = props.data.saveEndpoint ?? '/api/v1/admin/tenants/' + props.data.slug + '/general'
+    const response = await request(saveUrl, {
+        method: 'POST',
+        body: form.value,
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        editing.value = false
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+</script>
+
+<template>
+    <div v-if="!editing">
+        <table class="data-table">
+            <tr><th>Name:</th><td>{{ form.name }}</td></tr>
+            <tr><th>Slug:</th><td>{{ form.slug }}</td></tr>
+            <tr><th>URL:</th><td>{{ form.url }}</td></tr>
+            <tr><th>Status:</th><td>
+                <span class="badge-active">Aktiv</span>
+            </td></tr>
+        </table>
+        <button class="btn-edit" @click="editing = true">Bearbeiten</button>
+    </div>
+
+    <div v-else>
+        <table class="data-table">
+            <tr>
+                <th>Name:</th>
+                <td><input type="text" v-model="form.name" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>Slug:</th>
+                <td><input type="text" v-model="form.slug" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>URL:</th>
+                <td><input type="text" v-model="form.url" class="form-input" /></td>
+            </tr>
+            <tr><th>Status:</th><td>
+                <span class="badge-active">Aktiv</span>
+            </td></tr>
+        </table>
+        <div class="btn-group">
+            <button class="btn-save" @click="save">Speichern</button>
+            <button class="btn-cancel" @click="editing = false">Abbrechen</button>
+        </div>
+    </div>
+</template>
+
+<style scoped>
+.data-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.data-table th {
+    text-align: left;
+    padding: 8px 12px;
+    width: 200px;
+    color: #374151;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.data-table td {
+    padding: 8px 12px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.form-input {
+    width: 100%;
+    padding: 6px 10px;
+    border: 1px solid #d1d5db;
+    border-radius: 6px;
+    font-size: 0.95rem;
+    box-sizing: border-box;
+}
+
+.badge-active {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #166534;
+    background-color: #dcfce7;
+    border: 1px solid #22c55e;
+}
+
+.btn-edit, .btn-save, .btn-cancel {
+    margin-top: 15px;
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+}
+
+.btn-edit {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-edit:hover {
+    background-color: #163a7a;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-cancel {
+    background-color: #e5e7eb;
+    color: #374151;
+    margin-left: 10px;
+}
+
+.btn-cancel:hover {
+    background-color: #d1d5db;
+}
+
+.btn-group {
+    display: flex;
+    gap: 10px;
+}
+</style>
@@ -0,0 +1,56 @@
+<script setup>
+import { ref } from 'vue';
+import TextEditor from "../../../../Views/Components/TextEditor.vue";
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const props = defineProps({
+    data: {
+        type: Object,
+        default: () => ({})
+    },
+})
+
+const { request } = useAjax()
+
+const content = ref(props.data.impress_text ?? '')
+
+async function save() {
+    const saveUrl = props.data.saveEndpoint ?? '/api/v1/admin/tenant/impress'
+    const response = await request(saveUrl, {
+        method: 'POST',
+        body: { impress_text: content.value },
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+</script>
+
+<template>
+    <div>
+        <TextEditor v-model="content" />
+        <button class="btn-save" @click="save">Speichern</button>
+    </div>
+</template>
+
+<style scoped>
+.btn-save {
+    margin-top: 15px;
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+</style>
@@ -0,0 +1,140 @@
+<script setup>
+import { ref } from 'vue';
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const props = defineProps({
+    data: {
+        type: Object,
+        default: () => ({})
+    },
+})
+
+const { request } = useAjax()
+
+const editing = ref(false)
+const form = ref({
+    account_iban: props.data.account_iban ?? '',
+    account_bic: props.data.account_bic ?? '',
+    account_name: props.data.account_name ?? '',
+})
+
+async function save() {
+    const saveUrl = props.data.saveEndpoint ?? '/api/v1/admin/tenant/payment'
+    const response = await request(saveUrl, {
+        method: 'POST',
+        body: form.value,
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        editing.value = false
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+</script>
+
+<template>
+    <div v-if="!editing">
+        <table class="data-table">
+            <tr><th>IBAN:</th><td>{{ form.account_iban }}</td></tr>
+            <tr><th>BIC:</th><td>{{ form.account_bic }}</td></tr>
+            <tr><th>Name Kontoinhaber:</th><td>{{ form.account_name }}</td></tr>
+        </table>
+        <button class="btn-edit" @click="editing = true">Bearbeiten</button>
+    </div>
+
+    <div v-else>
+        <table class="data-table">
+            <tr>
+                <th>IBAN:</th>
+                <td><input type="text" v-model="form.account_iban" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>BIC:</th>
+                <td><input type="text" v-model="form.account_bic" class="form-input" /></td>
+            </tr>
+            <tr>
+                <th>Name Kontoinhaber:</th>
+                <td><input type="text" v-model="form.account_name" class="form-input" /></td>
+            </tr>
+        </table>
+        <div class="btn-group">
+            <button class="btn-save" @click="save">Speichern</button>
+            <button class="btn-cancel" @click="editing = false">Abbrechen</button>
+        </div>
+    </div>
+</template>
+
+<style scoped>
+.data-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.data-table th {
+    text-align: left;
+    padding: 8px 12px;
+    width: 200px;
+    color: #374151;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.data-table td {
+    padding: 8px 12px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.form-input {
+    width: 100%;
+    padding: 6px 10px;
+    border: 1px solid #d1d5db;
+    border-radius: 6px;
+    font-size: 0.95rem;
+    box-sizing: border-box;
+}
+
+.btn-edit, .btn-save, .btn-cancel {
+    margin-top: 15px;
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+}
+
+.btn-edit {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-edit:hover {
+    background-color: #163a7a;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-cancel {
+    background-color: #e5e7eb;
+    color: #374151;
+    margin-left: 10px;
+}
+
+.btn-cancel:hover {
+    background-color: #d1d5db;
+}
+
+.btn-group {
+    display: flex;
+    gap: 10px;
+}
+</style>
@@ -0,0 +1,331 @@
+<script setup>
+import { ref } from 'vue';
+import { useAjax } from "../../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const props = defineProps({
+    data: Object,
+})
+
+const emit = defineEmits(['updated', 'closed'])
+
+const { request } = useAjax()
+
+const editing = ref(false)
+const user = props.data.user
+const isOwnUser = props.data.isOwnUser
+const isLvTenant = props.data.isLvTenant
+const userRoles = props.data.userRoles
+const localGroups = props.data.localGroups
+
+const form = ref({
+    firstname: user.firstname ?? '',
+    lastname: user.lastname ?? '',
+    nickname: user.nickname ?? '',
+    email: user.email ?? '',
+    phone: user.phone ?? '',
+    birthday: user.birthday ?? '',
+    membership_id: user.membership_id ?? '',
+    address_1: user.address_1 ?? '',
+    address_2: user.address_2 ?? '',
+    postcode: user.postcode ?? '',
+    city: user.city ?? '',
+    medications: user.medications ?? '',
+    allergies: user.allergies ?? '',
+    intolerances: user.intolerances ?? '',
+    bank_account_owner: user.bank_account_owner ?? '',
+    bank_account_iban: user.bank_account_iban ?? '',
+    user_role_local_group: user.user_role_local_group ?? '',
+    user_role_main: user.user_role_main ?? '',
+    local_group: user.local_group ?? '',
+})
+
+async function save() {
+    const response = await request('/api/v1/admin/users/' + user.id, {
+        method: 'POST',
+        body: form.value,
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        editing.value = false
+        emit('updated')
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Speichern')
+    }
+}
+
+async function toggleActive() {
+    const response = await request('/api/v1/admin/users/' + user.id + '/toggle-active', {
+        method: 'POST',
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        emit('updated')
+    } else {
+        toast.error(response?.message ?? 'Fehler')
+    }
+}
+
+async function resetPassword() {
+    const response = await request('/api/v1/admin/users/' + user.id + '/reset-password', {
+        method: 'POST',
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+    } else {
+        toast.error(response?.message ?? 'Fehler')
+    }
+}
+
+function getRoleName(slug) {
+    const role = userRoles.find(r => r.slug === slug)
+    return role ? role.name : slug
+}
+
+function getGroupName(slug) {
+    const group = localGroups.find(g => g.slug === slug)
+    return group ? group.name : slug
+}
+</script>
+
+<template>
+    <div>
+        <div class="detail-header">
+            <h3>{{ user.firstname }} {{ user.lastname }}</h3>
+            <div class="detail-actions">
+                <button v-if="!editing" class="btn-edit" @click="editing = true">Bearbeiten</button>
+                <button class="btn-reset" @click="resetPassword">Passwort zurücksetzen</button>
+                <button v-if="!isOwnUser" :class="user.active ? 'btn-deactivate' : 'btn-activate'" @click="toggleActive">
+                    {{ user.active ? 'Deaktivieren' : 'Aktivieren' }}
+                </button>
+                <button class="btn-close" @click="emit('closed')">Schließen</button>
+            </div>
+        </div>
+
+        <div v-if="!editing">
+            <table class="data-table">
+                <tr><th>Anmeldename:</th><td>{{ user.username }}</td></tr>
+                <tr><th>Vorname:</th><td>{{ form.firstname }}</td></tr>
+                <tr><th>Nachname:</th><td>{{ form.lastname }}</td></tr>
+                <tr><th>Nickname:</th><td>{{ form.nickname }}</td></tr>
+                <tr><th>E-Mail:</th><td>{{ form.email }}</td></tr>
+                <tr><th>Telefon:</th><td>{{ form.phone }}</td></tr>
+                <tr><th>Geburtstag:</th><td>{{ form.birthday }}</td></tr>
+                <tr><th>Mitgliedsnummer:</th><td>{{ form.membership_id }}</td></tr>
+                <tr><th>Adresse 1:</th><td>{{ form.address_1 }}</td></tr>
+                <tr><th>Adresse 2:</th><td>{{ form.address_2 }}</td></tr>
+                <tr><th>PLZ:</th><td>{{ form.postcode }}</td></tr>
+                <tr><th>Ort:</th><td>{{ form.city }}</td></tr>
+                <tr><th>Medikamente:</th><td>{{ form.medications }}</td></tr>
+                <tr><th>Allergien:</th><td>{{ form.allergies }}</td></tr>
+                <tr><th>Unverträglichkeiten:</th><td>{{ form.intolerances }}</td></tr>
+                <tr><th>Kontoinhaber:</th><td>{{ form.bank_account_owner }}</td></tr>
+                <tr><th>IBAN:</th><td>{{ form.bank_account_iban }}</td></tr>
+                <tr><th>Stamm:</th><td>{{ getGroupName(form.local_group) }}</td></tr>
+                <tr><th>Rolle (Stamm):</th><td>{{ getRoleName(form.user_role_local_group) }}</td></tr>
+                <tr><th>Rolle (LV):</th><td>{{ getRoleName(form.user_role_main) }}</td></tr>
+                <tr><th>Status:</th><td>
+                    <span :class="user.active ? 'badge-active' : 'badge-inactive'">
+                        {{ user.active ? 'Aktiv' : 'Inaktiv' }}
+                    </span>
+                </td></tr>
+            </table>
+        </div>
+
+        <div v-else>
+            <table class="data-table">
+                <tr><th>Anmeldename:</th><td>{{ user.username }}</td></tr>
+                <tr><th>Vorname:</th><td><input type="text" v-model="form.firstname" class="form-input" /></td></tr>
+                <tr><th>Nachname:</th><td><input type="text" v-model="form.lastname" class="form-input" /></td></tr>
+                <tr><th>Nickname:</th><td><input type="text" v-model="form.nickname" class="form-input" /></td></tr>
+                <tr><th>E-Mail:</th><td><input type="email" v-model="form.email" class="form-input" /></td></tr>
+                <tr><th>Telefon:</th><td><input type="text" v-model="form.phone" class="form-input" /></td></tr>
+                <tr><th>Geburtstag:</th><td><input type="date" v-model="form.birthday" class="form-input" /></td></tr>
+                <tr><th>Mitgliedsnummer:</th><td><input type="text" v-model="form.membership_id" class="form-input" /></td></tr>
+                <tr><th>Adresse 1:</th><td><input type="text" v-model="form.address_1" class="form-input" /></td></tr>
+                <tr><th>Adresse 2:</th><td><input type="text" v-model="form.address_2" class="form-input" /></td></tr>
+                <tr><th>PLZ:</th><td><input type="text" v-model="form.postcode" class="form-input" /></td></tr>
+                <tr><th>Ort:</th><td><input type="text" v-model="form.city" class="form-input" /></td></tr>
+                <tr><th>Medikamente:</th><td><input type="text" v-model="form.medications" class="form-input" /></td></tr>
+                <tr><th>Allergien:</th><td><input type="text" v-model="form.allergies" class="form-input" /></td></tr>
+                <tr><th>Unverträglichkeiten:</th><td><input type="text" v-model="form.intolerances" class="form-input" /></td></tr>
+                <tr><th>Kontoinhaber:</th><td><input type="text" v-model="form.bank_account_owner" class="form-input" /></td></tr>
+                <tr><th>IBAN:</th><td><input type="text" v-model="form.bank_account_iban" class="form-input" /></td></tr>
+                <tr><th>Stamm:</th><td>
+                    <select v-if="isLvTenant" v-model="form.local_group" class="form-input">
+                        <option v-for="group in localGroups" :key="group.slug" :value="group.slug">{{ group.name }}</option>
+                    </select>
+                    <span v-else>{{ getGroupName(form.local_group) }}</span>
+                </td></tr>
+                <tr><th>Rolle (Stamm):</th><td>
+                    <select v-model="form.user_role_local_group" class="form-input">
+                        <option v-for="role in userRoles" :key="role.slug" :value="role.slug">{{ role.name }}</option>
+                    </select>
+                </td></tr>
+                <tr><th>Rolle (LV):</th><td>
+                    <select v-if="isLvTenant && !isOwnUser" v-model="form.user_role_main" class="form-input">
+                        <option v-for="role in userRoles" :key="role.slug" :value="role.slug">{{ role.name }}</option>
+                    </select>
+                    <span v-else>{{ getRoleName(form.user_role_main) }}</span>
+                </td></tr>
+            </table>
+            <div class="btn-group">
+                <button class="btn-save" @click="save">Speichern</button>
+                <button class="btn-cancel" @click="editing = false">Abbrechen</button>
+            </div>
+        </div>
+    </div>
+</template>
+
+<style scoped>
+.detail-header {
+    display: flex;
+    justify-content: space-between;
+    align-items: center;
+    margin-bottom: 15px;
+    flex-wrap: wrap;
+    gap: 10px;
+}
+
+.detail-header h3 {
+    margin: 0;
+    color: #1f2937;
+}
+
+.detail-actions {
+    display: flex;
+    gap: 8px;
+    flex-wrap: wrap;
+}
+
+.data-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.data-table th {
+    text-align: left;
+    padding: 6px 12px;
+    width: 180px;
+    color: #374151;
+    border-bottom: 1px solid #e5e7eb;
+    font-size: 0.9rem;
+}
+
+.data-table td {
+    padding: 6px 12px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.form-input {
+    width: 100%;
+    padding: 5px 8px;
+    border: 1px solid #d1d5db;
+    border-radius: 6px;
+    font-size: 0.9rem;
+    box-sizing: border-box;
+}
+
+.badge-active {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #166534;
+    background-color: #dcfce7;
+    border: 1px solid #22c55e;
+}
+
+.badge-inactive {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #991b1b;
+    background-color: #fee2e2;
+    border: 1px solid #ef4444;
+}
+
+.btn-edit, .btn-save, .btn-cancel, .btn-reset, .btn-deactivate, .btn-activate, .btn-close {
+    padding: 6px 16px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.85rem;
+}
+
+.btn-edit {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-edit:hover {
+    background-color: #163a7a;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-cancel {
+    background-color: #e5e7eb;
+    color: #374151;
+}
+
+.btn-cancel:hover {
+    background-color: #d1d5db;
+}
+
+.btn-reset {
+    background-color: #f59e0b;
+    color: #ffffff;
+}
+
+.btn-reset:hover {
+    background-color: #d97706;
+}
+
+.btn-deactivate {
+    background-color: #ef4444;
+    color: #ffffff;
+}
+
+.btn-deactivate:hover {
+    background-color: #dc2626;
+}
+
+.btn-activate {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-activate:hover {
+    background-color: #15803d;
+}
+
+.btn-close {
+    background-color: #6b7280;
+    color: #ffffff;
+}
+
+.btn-close:hover {
+    background-color: #4b5563;
+}
+
+.btn-group {
+    display: flex;
+    gap: 10px;
+    margin-top: 15px;
+}
+</style>
@@ -0,0 +1,109 @@
+<script setup>
+import AdminAppLayout from "../../../../resources/js/layouts/AdminAppLayout.vue";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+import TabbedPage from "../../../Views/Components/TabbedPage.vue";
+import TenantContact from "./Partials/TenantContact.vue";
+import TenantPayment from "./Partials/TenantPayment.vue";
+import TenantImpress from "./Partials/TenantImpress.vue";
+import TenantGdpr from "./Partials/TenantGdpr.vue";
+
+const props = defineProps({
+    tenant: Object,
+})
+
+const tabs = [
+    {
+        title: 'Kontaktdaten',
+        component: TenantContact,
+        endpoint: '/api/v1/admin/tenant/contact',
+    },
+    {
+        title: 'Bezahldaten',
+        component: TenantPayment,
+        endpoint: '/api/v1/admin/tenant/payment',
+    },
+    {
+        title: 'Impressum',
+        component: TenantImpress,
+        endpoint: '/api/v1/admin/tenant/impress',
+    },
+    {
+        title: 'Datenschutzerklärung',
+        component: TenantGdpr,
+        endpoint: '/api/v1/admin/tenant/gdpr',
+    },
+]
+</script>
+
+<template>
+    <AdminAppLayout :title="props.tenant.slug === 'lv' ? 'LV-Daten' : 'Stammesdaten'">
+        <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
+            <table class="tenant-header">
+                <tr><th>Name</th><td>{{ props.tenant.name }}</td></tr>
+                <tr><th>Slug</th><td>{{ props.tenant.slug }}</td></tr>
+                <tr><th>mareike-URL:</th><td>{{ props.tenant.url }}</td></tr>
+                <tr><th>Status</th><td>
+                    <span :class="props.tenant.is_active_local_group ? 'badge-active' : 'badge-inactive'">
+                        {{ props.tenant.is_active_local_group ? 'Aktiv' : 'Inaktiv' }}
+                    </span>
+                </td></tr>
+            </table>
+
+            <div style="margin-top: 30px;">
+                <tabbed-page :tabs="tabs" />
+            </div>
+        </shadowed-box>
+    </AdminAppLayout>
+</template>
+
+<style scoped>
+.tenant-header {
+    width: 100%;
+    border-collapse: collapse;
+    border: 1px solid #d1d5db;
+    border-radius: 8px;
+    overflow: hidden;
+}
+
+.tenant-header th {
+    text-align: left;
+    padding: 10px 16px;
+    width: 200px;
+    color: #374151;
+    font-weight: bold;
+    background-color: #f9fafb;
+    border-bottom: 1px solid #d1d5db;
+}
+
+.tenant-header td {
+    padding: 10px 16px;
+    border-bottom: 1px solid #d1d5db;
+}
+
+.tenant-header tr:last-child th,
+.tenant-header tr:last-child td {
+    border-bottom: none;
+}
+
+.badge-active {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #166534;
+    background-color: #dcfce7;
+    border: 1px solid #22c55e;
+}
+
+.badge-inactive {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #991b1b;
+    background-color: #fee2e2;
+    border: 1px solid #ef4444;
+}
+</style>
@@ -0,0 +1,52 @@
+<script setup>
+import AdminAppLayout from "../../../../resources/js/layouts/AdminAppLayout.vue";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+import TabbedPage from "../../../Views/Components/TabbedPage.vue";
+import TenantGeneral from "./Partials/TenantGeneral.vue";
+import TenantContact from "./Partials/TenantContact.vue";
+import TenantPayment from "./Partials/TenantPayment.vue";
+import TenantImpress from "./Partials/TenantImpress.vue";
+import TenantGdpr from "./Partials/TenantGdpr.vue";
+
+const props = defineProps({
+    tenant: Object,
+})
+
+const slug = props.tenant.slug
+
+const tabs = [
+    {
+        title: 'Allgemeines',
+        component: TenantGeneral,
+        endpoint: '/api/v1/admin/tenants/' + slug + '/general',
+    },
+    {
+        title: 'Kontaktdaten',
+        component: TenantContact,
+        endpoint: '/api/v1/admin/tenants/' + slug + '/contact',
+    },
+    {
+        title: 'Bezahldaten',
+        component: TenantPayment,
+        endpoint: '/api/v1/admin/tenants/' + slug + '/payment',
+    },
+    {
+        title: 'Impressum',
+        component: TenantImpress,
+        endpoint: '/api/v1/admin/tenants/' + slug + '/impress',
+    },
+    {
+        title: 'Datenschutzerklärung',
+        component: TenantGdpr,
+        endpoint: '/api/v1/admin/tenants/' + slug + '/gdpr',
+    },
+]
+</script>
+
+<template>
+    <AdminAppLayout :title="props.tenant.name">
+        <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
+            <tabbed-page :tabs="tabs" />
+        </shadowed-box>
+    </AdminAppLayout>
+</template>
@@ -0,0 +1,248 @@
+<script setup>
+import { ref, onMounted } from 'vue';
+import AdminAppLayout from "../../../../resources/js/layouts/AdminAppLayout.vue";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+import { useAjax } from "../../../../resources/js/components/ajaxHandler.js";
+import { toast } from "vue3-toastify";
+
+const { request } = useAjax()
+
+function openTenant(slug) {
+    window.location.href = '/admin/tenants/' + slug
+}
+
+const tenants = ref([])
+const showCreate = ref(false)
+const createForm = ref({
+    name: '',
+    slug: '',
+    url: '',
+})
+
+onMounted(async () => {
+    await loadTenants()
+})
+
+async function loadTenants() {
+    const response = await fetch('/api/v1/admin/tenants/list', {
+        headers: {
+            'Accept': 'application/json',
+            'X-Requested-With': 'XMLHttpRequest',
+        },
+        credentials: 'same-origin',
+    })
+    const data = await response.json()
+    tenants.value = data.tenants
+}
+
+async function createTenant() {
+    const response = await request('/api/v1/admin/tenants/create', {
+        method: 'POST',
+        body: createForm.value,
+    })
+
+    if (response && response.status === 'success') {
+        toast.success(response.message)
+        showCreate.value = false
+        createForm.value = { name: '', slug: '', url: '' }
+        await loadTenants()
+    } else {
+        toast.error(response?.message ?? 'Fehler beim Anlegen')
+    }
+}
+</script>
+
+<template>
+    <AdminAppLayout title="Stämme">
+        <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
+            <table class="tenant-table">
+                <thead>
+                    <tr>
+                        <th>Name</th>
+                        <th>Slug</th>
+                        <th>URL</th>
+                        <th>Status</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    <tr v-for="tenant in tenants" :key="tenant.slug" class="tenant-row" @click="openTenant(tenant.slug)">
+                        <td>{{ tenant.name }}</td>
+                        <td>{{ tenant.slug }}</td>
+                        <td>{{ tenant.url }}</td>
+                        <td>
+                            <span :class="tenant.is_active_local_group ? 'badge-active' : 'badge-inactive'">
+                                {{ tenant.is_active_local_group ? 'Aktiv' : 'Inaktiv' }}
+                            </span>
+                        </td>
+                    </tr>
+                </tbody>
+            </table>
+
+            <div style="margin-top: 20px;">
+                <button v-if="!showCreate" class="btn-create" @click="showCreate = true">Neuen Stamm anlegen</button>
+
+                <div v-if="showCreate" class="create-form">
+                    <h3>Neuen Stamm anlegen</h3>
+                    <table class="form-table">
+                        <tr>
+                            <th>Name</th>
+                            <td><input type="text" v-model="createForm.name" class="form-input" /></td>
+                        </tr>
+                        <tr>
+                            <th>Slug</th>
+                            <td><input type="text" v-model="createForm.slug" class="form-input" /></td>
+                        </tr>
+                        <tr>
+                            <th>URL</th>
+                            <td><input type="text" v-model="createForm.url" class="form-input" /></td>
+                        </tr>
+                    </table>
+                    <div class="btn-group">
+                        <button class="btn-save" @click="createTenant">Anlegen</button>
+                        <button class="btn-cancel" @click="showCreate = false">Abbrechen</button>
+                    </div>
+                </div>
+            </div>
+        </shadowed-box>
+    </AdminAppLayout>
+</template>
+
+<style scoped>
+.tenant-table {
+    width: 100%;
+    border-collapse: collapse;
+    border: 1px solid #d1d5db;
+    border-radius: 8px;
+    overflow: hidden;
+}
+
+.tenant-table thead th {
+    text-align: left;
+    padding: 10px 16px;
+    background-color: #f9fafb;
+    color: #374151;
+    font-weight: bold;
+    border-bottom: 2px solid #d1d5db;
+}
+
+.tenant-table tbody td {
+    padding: 10px 16px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.tenant-row {
+    cursor: pointer;
+}
+
+.tenant-row:hover {
+    background-color: #f3f4f6;
+}
+
+.badge-active {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #166534;
+    background-color: #dcfce7;
+    border: 1px solid #22c55e;
+}
+
+.badge-inactive {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #991b1b;
+    background-color: #fee2e2;
+    border: 1px solid #ef4444;
+}
+
+.create-form {
+    margin-top: 15px;
+    padding: 20px;
+    border: 1px solid #d1d5db;
+    border-radius: 8px;
+    background-color: #f9fafb;
+}
+
+.create-form h3 {
+    margin: 0 0 15px 0;
+    color: #374151;
+}
+
+.form-table {
+    width: 100%;
+    border-collapse: collapse;
+}
+
+.form-table th {
+    text-align: left;
+    padding: 8px 12px;
+    width: 100px;
+    color: #374151;
+}
+
+.form-table td {
+    padding: 8px 12px;
+}
+
+.form-input {
+    width: 100%;
+    padding: 6px 10px;
+    border: 1px solid #d1d5db;
+    border-radius: 6px;
+    font-size: 0.95rem;
+    box-sizing: border-box;
+}
+
+.btn-create {
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.btn-create:hover {
+    background-color: #163a7a;
+}
+
+.btn-group {
+    display: flex;
+    gap: 10px;
+    margin-top: 15px;
+}
+
+.btn-save, .btn-cancel {
+    padding: 8px 20px;
+    border: none;
+    border-radius: 6px;
+    cursor: pointer;
+    font-weight: bold;
+    font-size: 0.9rem;
+}
+
+.btn-save {
+    background-color: #16a34a;
+    color: #ffffff;
+}
+
+.btn-save:hover {
+    background-color: #15803d;
+}
+
+.btn-cancel {
+    background-color: #e5e7eb;
+    color: #374151;
+}
+
+.btn-cancel:hover {
+    background-color: #d1d5db;
+}
+</style>
@@ -0,0 +1,167 @@
+<script setup>
+import { ref, onMounted } from 'vue';
+import AdminAppLayout from "../../../../resources/js/layouts/AdminAppLayout.vue";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+import FullScreenModal from "../../../Views/Components/FullScreenModal.vue";
+import UserDetail from "./Partials/UserDetail.vue";
+import { useAjax } from "../../../../resources/js/components/ajaxHandler.js";
+
+const { request } = useAjax()
+
+const props = defineProps({
+    isLvTenant: Boolean,
+})
+
+const users = ref([])
+const selectedUserId = ref(null)
+const userDetail = ref(null)
+
+onMounted(async () => {
+    await loadUsers()
+})
+
+async function loadUsers() {
+    const response = await fetch('/api/v1/admin/users/list', {
+        headers: {
+            'Accept': 'application/json',
+            'X-Requested-With': 'XMLHttpRequest',
+        },
+        credentials: 'same-origin',
+    })
+    const data = await response.json()
+    users.value = data.users
+}
+
+async function selectUser(userId) {
+    if (selectedUserId.value === userId) {
+        selectedUserId.value = null
+        userDetail.value = null
+        return
+    }
+
+    selectedUserId.value = userId
+    const response = await fetch('/api/v1/admin/users/' + userId, {
+        headers: {
+            'Accept': 'application/json',
+            'X-Requested-With': 'XMLHttpRequest',
+        },
+        credentials: 'same-origin',
+    })
+    userDetail.value = await response.json()
+}
+
+function onUserUpdated() {
+    loadUsers()
+    if (selectedUserId.value) {
+        selectUser(selectedUserId.value)
+    }
+}
+
+function onDetailClosed() {
+    selectedUserId.value = null
+    userDetail.value = null
+    loadUsers()
+}
+</script>
+
+<template>
+    <AdminAppLayout title="Benutzer*innen">
+        <shadowed-box style="width: 95%; margin: 20px auto; padding: 20px; overflow-x: hidden;">
+            <table class="user-table">
+                <thead>
+                    <tr>
+                        <th>Nachname</th>
+                        <th>Vorname</th>
+                        <th>Pfadiname</th>
+                        <th v-if="props.isLvTenant">Stamm</th>
+                        <th>Status</th>
+                    </tr>
+                </thead>
+                <tbody>
+                    <tr v-for="user in users"
+                        :key="user.id"
+                        :class="['user-row', { 'user-row-selected': selectedUserId === user.id }]"
+                        @click="selectUser(user.id)">
+                        <td>{{ user.lastname }}</td>
+                        <td>{{ user.firstname }}</td>
+                        <td>{{ user.nickname }}</td>
+                        <td v-if="props.isLvTenant">{{ user.local_group_name }}</td>
+                        <td>
+                            <span :class="user.active ? 'badge-active' : 'badge-inactive'">
+                                {{ user.active ? 'Aktiv' : 'Inaktiv' }}
+                            </span>
+                        </td>
+                    </tr>
+                </tbody>
+            </table>
+
+        </shadowed-box>
+
+        <FullScreenModal :show="userDetail !== null" @close="onDetailClosed">
+            <UserDetail
+                v-if="userDetail"
+                :data="userDetail"
+                @updated="onUserUpdated"
+                @closed="onDetailClosed"
+            />
+        </FullScreenModal>
+    </AdminAppLayout>
+</template>
+
+<style scoped>
+.user-table {
+    width: 100%;
+    border-collapse: collapse;
+    border: 1px solid #d1d5db;
+    border-radius: 8px;
+    overflow: hidden;
+}
+
+.user-table thead th {
+    text-align: left;
+    padding: 10px 16px;
+    background-color: #f9fafb;
+    color: #374151;
+    font-weight: bold;
+    border-bottom: 2px solid #d1d5db;
+}
+
+.user-table tbody td {
+    padding: 10px 16px;
+    border-bottom: 1px solid #e5e7eb;
+}
+
+.user-row {
+    cursor: pointer;
+}
+
+.user-row:hover {
+    background-color: #f3f4f6;
+}
+
+.user-row-selected {
+    background-color: #eff6ff;
+}
+
+.badge-active {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #166534;
+    background-color: #dcfce7;
+    border: 1px solid #22c55e;
+}
+
+.badge-inactive {
+    display: inline-block;
+    padding: 3px 12px;
+    border-radius: 12px;
+    font-size: 0.85rem;
+    font-weight: bold;
+    color: #991b1b;
+    background-color: #fee2e2;
+    border: 1px solid #ef4444;
+}
+</style>
@@ -4,14 +4,13 @@ namespace App\Domains\CostUnit\Controllers;

 use App\Domains\Invoice\Actions\ChangeStatus\ChangeStatusCommand;
 use App\Domains\Invoice\Actions\ChangeStatus\ChangeStatusRequest;
-use App\Domains\Invoice\Actions\CreateInvoice\CreateInvoiceRequest;
 use App\Domains\Invoice\Actions\CreateInvoiceReceipt\CreateInvoiceReceiptCommand;
 use App\Domains\Invoice\Actions\CreateInvoiceReceipt\CreateInvoiceReceiptRequest;
 use App\Enumerations\InvoiceStatus;
+use App\Models\SepaPaymentElement;
 use App\Models\Tenant;
 use App\Providers\FileWriteProvider;
 use App\Providers\InvoiceCsvFileProvider;
-use App\Providers\PainFileProvider;
 use App\Providers\WebDavProvider;
 use App\Providers\ZipArchiveFileProvider;
 use App\Scopes\CommonController;
@@ -25,24 +24,19 @@ class ExportController extends CommonController {

        $webdavProvider = new WebDavProvider(WebDavProvider::INVOICE_PREFIX . $this->tenant->url . '/' . $costUnit->name);

-        $painFileData = $this->painData($invoicesForExport);
+        $this->createSepaPaymentElements($invoicesForExport, $costUnit);
        $csvData = $this->csvData($invoicesForExport);

        $filePrefix = Tenant::getTempDirectory();

-        $painFileWriteProvider = new FileWriteProvider($filePrefix . 'abrechnungen-' . date('Y-m-d_H-i') . '-sepa.xml', $painFileData);
-        $painFileWriteProvider->writeToFile();
-
        $csvFileWriteProvider = new FileWriteProvider($filePrefix . 'abrechnungen-' . date('Y-m-d_H-i') . '.csv', $csvData);
        $csvFileWriteProvider->writeToFile();

        if ($this->tenant->upload_exports) {
-            $webdavProvider->uploadFile($painFileWriteProvider->fileName);
            $webdavProvider->uploadFile($csvFileWriteProvider->fileName);
        }

        $downloadZipArchiveFiles = [
-            $painFileWriteProvider->fileName,
            $csvFileWriteProvider->fileName
        ];

@@ -72,7 +66,6 @@ class ExportController extends CommonController {
                Storage::delete($file);
            }

-            Storage::delete($painFileWriteProvider->fileName);
            Storage::delete($csvFileWriteProvider->fileName);

            return response()->download(
@@ -82,24 +75,28 @@ class ExportController extends CommonController {
            );
        }

-        Storage::delete($painFileWriteProvider->fileName);
        Storage::delete($csvFileWriteProvider->fileName);
        return response()->json([
-            'message' => 'Die Abrechnungen wurden exportiert.' . PHP_EOL .'Die Belege werden asynchron auf dem Webdav-Server hinterlegt.' . PHP_EOL . PHP_EOL . 'Sollten diese in 15 Minuten nicht vollständig sein, kontaktiere den Adminbistrator.'
+            'message' => 'Die Abrechnungen wurden exportiert.' . PHP_EOL . 'Die SEPA-Überweisungsdatei kann über den Tab "Globale Aktionen" in der Kostenstellenübersicht erzeugt werden.' . PHP_EOL . PHP_EOL . 'Die Belege werden asynchron auf dem Webdav-Server hinterlegt.' . PHP_EOL . 'Sollten diese in 15 Minuten nicht vollständig sein, kontaktiere den Administrator.'
        ]);

    }

-    private  function painData(array $invoices) : string {
-        $invoicesForPainFile = [];
+    private function createSepaPaymentElements(array $invoices, $costUnit): void
+    {
        foreach ($invoices as $invoice) {
            if ($invoice->contact_bank_owner !== null && $invoice->contact_bank_iban !== '' && !$invoice->donation) {
-                $invoicesForPainFile[] = $invoice;
+                SepaPaymentElement::create([
+                    'tenant' => $this->tenant->slug,
+                    'invoice_id' => $invoice->id,
+                    'cost_unit_id' => $costUnit->id,
+                    'amount' => $invoice->amount,
+                    'recipient_name' => $invoice->contact_bank_owner,
+                    'recipient_iban' => $invoice->contact_bank_iban,
+                    'payment_purpose' => $invoice->payment_purpose ?? 'Auslagenerstattung Rechnungsnummer ' . $invoice->invoice_number,
+                ]);
            }
        }
-
-        $painFileProvider = new PainFileProvider($this->tenant->account_iban, $this->tenant->account_name, $this->tenant->account_bic, $invoicesForPainFile);
-        return $painFileProvider->createPainFileContent();
    }

    public function csvData(array $invoices) : string {
@@ -107,4 +104,3 @@ class ExportController extends CommonController {
        return $csvDateProvider->createCsvFileContent();
    }
 }
-
@@ -0,0 +1,82 @@
+<?php
+
+namespace App\Domains\CostUnit\Controllers;
+
+use App\Enumerations\UserRole;
+use App\Models\SepaPaymentElement;
+use App\Models\Tenant;
+use App\Providers\AuthCheckProvider;
+use App\Providers\FileWriteProvider;
+use App\Providers\PainFileProvider;
+use App\Scopes\CommonController;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Storage;
+
+class GlobalSepaExportController extends CommonController {
+
+    private function checkAuthorization(): void
+    {
+        $authCheck = new AuthCheckProvider();
+        $role = $authCheck->getUserRole();
+        if (!in_array($role, [UserRole::USER_ROLE_ADMIN, UserRole::USER_ROLE_GROUP_LEADER], true)) {
+            abort(403);
+        }
+    }
+
+    public function getGlobalActions()
+    {
+        $this->checkAuthorization();
+
+        $pendingElements = SepaPaymentElement::where('exported', false)->get();
+        $pendingCount = $pendingElements->count();
+        $pendingAmount = number_format($pendingElements->sum('amount'), 2, ',', '.');
+
+        return response()->json([
+            'pending_count' => $pendingCount,
+            'pending_amount' => $pendingAmount,
+        ]);
+    }
+
+    public function exportSepaFile()
+    {
+        $this->checkAuthorization();
+
+        return DB::transaction(function () {
+            $elements = SepaPaymentElement::where('exported', false)->lockForUpdate()->get();
+
+            if ($elements->isEmpty()) {
+                return response()->json([
+                    'message' => 'Es gibt keine ausstehenden SEPA-Überweisungen.'
+                ], 404);
+            }
+
+            $painFileProvider = new PainFileProvider(
+                $this->tenant->account_iban,
+                $this->tenant->account_name,
+                $this->tenant->account_bic,
+                $elements->all()
+            );
+
+            $painContent = $painFileProvider->createPainFileContent();
+
+            $filePrefix = Tenant::getTempDirectory();
+            $fileName = $filePrefix . 'sepa-pain-' . date('Y-m-d_H-i') . '.xml';
+
+            $fileWriteProvider = new FileWriteProvider($fileName, $painContent);
+            $fileWriteProvider->writeToFile();
+
+            $elements->each(function (SepaPaymentElement $element) {
+                $element->update([
+                    'exported' => true,
+                    'exported_at' => now(),
+                ]);
+            });
+
+            $filePath = storage_path('app/private/' . $fileName);
+
+            return response()->download($filePath, basename($fileName), [
+                'Content-Type' => 'application/xml',
+            ])->deleteFileAfterSend(true);
+        });
+    }
+}
@@ -4,6 +4,7 @@ use App\Domains\CostUnit\Controllers\CreateController;
 use App\Domains\CostUnit\Controllers\DistanceAllowanceController;
 use App\Domains\CostUnit\Controllers\EditController;
 use App\Domains\CostUnit\Controllers\ExportController;
+use App\Domains\CostUnit\Controllers\GlobalSepaExportController;
 use App\Domains\CostUnit\Controllers\ListController;
 use App\Domains\CostUnit\Controllers\OpenController;
 use App\Domains\CostUnit\Controllers\TreasurersEditController;
@@ -43,6 +44,9 @@ Route::prefix('api/v1')



+                    Route::get('/global-actions', [GlobalSepaExportController::class, 'getGlobalActions']);
+                    Route::get('/export-sepa-file', [GlobalSepaExportController::class, 'exportSepaFile']);
+
                    Route::prefix('open')->group(function () {
                        Route::get('/current-events', [ListController::class, 'listCurrentEvents']);
                        Route::get('/current-running-jobs', [ListController::class, 'listCurrentRunningJobs']);
@@ -7,6 +7,7 @@ import TabbedPage from "../../../Views/Components/TabbedPage.vue";
 import {toast} from "vue3-toastify";

 import ListCostUnits from "./Partials/ListCostUnits.vue";
+import GlobalActions from "./Partials/GlobalActions.vue";

 const props = defineProps({
    message: String,
@@ -63,6 +64,13 @@ const tabs = [
        deep_jump_id: initialCostUnitId,
        deep_jump_id_sub: initialInvoiceId,
    },
+    {
+        title: 'Globale Aktionen',
+        component: GlobalActions,
+        endpoint: "/api/v1/cost-unit/global-actions",
+        deep_jump_id: 0,
+        deep_jump_id_sub: 0,
+    },
 ]

 onMounted(() => {
@@ -0,0 +1,112 @@
+<script setup>
+import {ref} from 'vue'
+import LoadingModal from "../../../../Views/Components/LoadingModal.vue";
+import {toast} from "vue3-toastify";
+
+const props = defineProps({
+    data: {
+        type: [Array, Object],
+        default: () => ({})
+    },
+    deep_jump_id: {
+        type: Number,
+        default: 0
+    },
+    deep_jump_id_sub: {
+        type: Number,
+        default: 0
+    }
+})
+
+const showLoading = ref(false)
+
+async function exportSepaFile() {
+    showLoading.value = true;
+
+    try {
+        const response = await fetch('/api/v1/cost-unit/export-sepa-file', {
+            headers: {"Content-Type": "application/json"},
+        });
+
+        if (!response.ok) {
+            if (response.status === 404) {
+                const data = await response.json();
+                toast.info(data.message);
+            } else {
+                throw new Error('Fehler beim Erzeugen der SEPA-Datei');
+            }
+            showLoading.value = false;
+            return;
+        }
+
+        const blob = await response.blob();
+        const downloadUrl = window.URL.createObjectURL(blob);
+        const a = document.createElement("a");
+        a.style.display = "none";
+        a.href = downloadUrl;
+        a.download = "sepa-pain-" + new Date().toISOString().slice(0, 10) + ".xml";
+
+        document.body.appendChild(a);
+        a.click();
+
+        setTimeout(() => {
+            window.URL.revokeObjectURL(downloadUrl);
+            document.body.removeChild(a);
+        }, 100);
+
+        toast.success('SEPA-Datei wurde erfolgreich erzeugt.');
+        showLoading.value = false;
+
+    } catch (err) {
+        showLoading.value = false;
+        toast.error('Beim Erzeugen der SEPA-Datei ist ein Fehler aufgetreten.');
+    }
+}
+</script>
+
+<template>
+    <div>
+        <h2>Globale Aktionen</h2>
+
+        <div style="margin: 20px 0;">
+            <p v-if="props.data.pending_count > 0">
+                Es gibt <strong>{{ props.data.pending_count }}</strong> ausstehende SEPA-Überweisungen
+                (Gesamtbetrag: <strong>{{ props.data.pending_amount }} Euro</strong>).
+            </p>
+            <p v-else>
+                Keine ausstehenden SEPA-Überweisungen vorhanden.
+            </p>
+        </div>
+
+        <button
+            class="action-button"
+            :disabled="!props.data.pending_count || props.data.pending_count === 0"
+            @click="exportSepaFile"
+        >
+            Erzeuge SEPA-File
+        </button>
+
+        <loading-modal v-if="showLoading" />
+    </div>
+</template>
+
+<style scoped>
+.action-button {
+    padding: 10px 20px;
+    background-color: #0073aa;
+    color: white;
+    border: none;
+    border-radius: 4px;
+    cursor: pointer;
+    font-size: 1rem;
+}
+
+.action-button:hover:not(:disabled) {
+    background-color: #005a87;
+}
+
+.action-button:disabled {
+    background-color: #ccc;
+    cursor: not-allowed;
+}
+</style>
@@ -54,7 +54,7 @@ function eatingHabit() {
            <table class="form-table" style="margin-bottom: 20px;">
                <tr>
                    <td>Dein Name:</td>
-                    <td>{{props.formData.vorname}} {{props.formData.vorname}}</td>
+                    <td>{{props.formData.vorname}} {{props.formData.nachname}}</td>
                </tr>

                <tr>
@@ -4,6 +4,7 @@ namespace App\Domains\Invoice\Actions\CreateInvoice;

 use App\Enumerations\InvoiceStatus;
 use App\Mail\InvoiceMails\InvoiceMailsNewInvoiceMail;
+use App\Mail\InvoiceMails\InvoiceMailsSubmittedConfirmationMail;
 use App\Mail\ParticipantParticipationMails\EventSignUpSuccessfullMail;
 use App\Models\Invoice;
 use Illuminate\Support\Facades\Mail;
@@ -30,7 +31,7 @@ class CreateInvoiceCommand {
            'type' => $this->request->invoiceType,
            'type_other' => $this->request->invoiceTypeExtended,
            'donation' => $this->request->isDonation,
-            'user_id' => $this->request->userId,
+            'user_id' => $this->request->paymentPurpose === null ? $this->request->userId : null,
            'contact_name' => $this->request->contactName,
            'contact_email' => $this->request->contactEmail,
            'contact_phone' => $this->request->contactPhone,
@@ -50,6 +51,13 @@ class CreateInvoiceCommand {
        if ($invoice !== null) {
            $response->success = true;
            $response->invoice = $invoice;
+
+            if ($invoice->contact_email !== null) {
+                Mail::to($invoice->contact_email)->send(new InvoiceMailsSubmittedConfirmationMail(
+                    invoice: $invoice,
+                    costUnit: $this->request->costUnit,
+                ));
+            }
        }

        if ($this->request->costUnit->mail_on_new) {
@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Domains\Legal\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class GdprController extends CommonController
+{
+    public function __invoke(Request $request): Response
+    {
+        $inertiaProvider = new InertiaProvider('Legal/LegalPage', [
+            'title' => 'Datenschutzerklärung',
+            'content' => $this->tenant->gdpr_text ?? '',
+        ]);
+        return $inertiaProvider->render();
+    }
+}
@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Domains\Legal\Controllers;
+
+use App\Providers\InertiaProvider;
+use App\Scopes\CommonController;
+use Illuminate\Http\Request;
+use Inertia\Response;
+
+class ImpressController extends CommonController
+{
+    public function __invoke(Request $request): Response
+    {
+        $inertiaProvider = new InertiaProvider('Legal/LegalPage', [
+            'title' => 'Impressum',
+            'content' => $this->tenant->impress_text ?? '',
+        ]);
+        return $inertiaProvider->render();
+    }
+}
@@ -0,0 +1,11 @@
+<?php
+
+use App\Domains\Legal\Controllers\ImpressController;
+use App\Domains\Legal\Controllers\GdprController;
+use App\Middleware\IdentifyTenant;
+use Illuminate\Support\Facades\Route;
+
+Route::middleware(IdentifyTenant::class)->group(function () {
+    Route::get('/impress', ImpressController::class);
+    Route::get('/gdpr', GdprController::class);
+});
@@ -0,0 +1,83 @@
+<script setup>
+import AppLayout from "../../../../resources/js/layouts/AppLayout.vue";
+import ShadowedBox from "../../../Views/Components/ShadowedBox.vue";
+
+const props = defineProps({
+    title: String,
+    content: String,
+})
+</script>
+
+<template>
+    <AppLayout :title="props.title">
+        <ShadowedBox class="legal-page-box">
+            <h2 class="legal-page-title">{{ props.title }}</h2>
+            <div class="legal-page-content" v-html="props.content"></div>
+        </ShadowedBox>
+    </AppLayout>
+</template>
+
+<style scoped>
+.legal-page-box {
+    width: 95%;
+    margin: 20px auto;
+    padding: 20px;
+    overflow-x: hidden;
+}
+
+.legal-page-title {
+    font-size: 1.5rem;
+    margin: 0 0 20px 0;
+    color: #333;
+    border-bottom: 2px solid #e5e7eb;
+    padding-bottom: 12px;
+}
+
+.legal-page-content {
+    line-height: 1.7;
+    color: #374151;
+    word-wrap: break-word;
+    overflow-wrap: break-word;
+}
+
+.legal-page-content :deep(img) {
+    max-width: 100%;
+    height: auto;
+}
+
+.legal-page-content :deep(table) {
+    width: 100%;
+    overflow-x: auto;
+    display: block;
+}
+
+.legal-page-content :deep(a) {
+    color: #2563eb;
+    word-break: break-all;
+}
+
+.legal-page-content :deep(h1),
+.legal-page-content :deep(h2),
+.legal-page-content :deep(h3) {
+    margin-top: 1.5em;
+    margin-bottom: 0.5em;
+    color: #1f2937;
+}
+
+.legal-page-content :deep(p) {
+    margin-bottom: 1em;
+}
+
+@media (max-width: 639px) {
+    .legal-page-box {
+        width: 100%;
+        margin: 0;
+        padding: 16px 12px;
+        border-radius: 0;
+    }
+
+    .legal-page-title {
+        font-size: 1.2rem;
+    }
+}
+</style>
@@ -2,6 +2,7 @@

 namespace App\Domains\UserManagement\Controllers;

+use App\Enumerations\UserRole;
 use App\Providers\InertiaProvider;
 use App\Scopes\CommonController;
 use Illuminate\Http\Request;
@@ -38,20 +39,44 @@ class LoginController extends CommonController {
            return redirect()->intended('/register/verifyEmail');
        }

-
-        #$credentials =  ['username' => 'development', 'password' => 'development'];
-
        if (!Auth::attempt($credentials)) {
            return back()->withErrors([
                'username' => 'Diese Zugangsdaten sind ungültig.',
            ]);
        }

-        $request->session()->regenerate();
        $user = Auth::user();
+        $tenant = app('tenant');

+        // Auf "lv" darf sich grundsätzlich jeder aktive Nutzer einloggen.
+        // Auf Sub-Tenants gilt:
+        //   - Der Nutzer muss dem Tenant zugeordnet sein (local_group)
+        //   - ODER er hat "Bundesrecht über Landesrecht":
+        //     user_role_main === ROLE_ADMINISTRATOR -> Login auf jedem Sub-Tenant erlaubt.
+        $isMainAdmin = $user->user_role_main === UserRole::USER_ROLE_ADMIN;
+        $isMemberOfTenant = $tenant->slug === $user->local_group;

-#        dd($user->firstname . ' ' . $user->lastname);
+        if ($tenant->slug !== 'lv' && !$isMainAdmin && !$isMemberOfTenant) {
+            Auth::logout();
+            $request->session()->invalidate();
+            $request->session()->regenerateToken();
+
+            return back()->withErrors([
+                'username' => 'Diese Zugangsdaten sind für diesen Stamm nicht gültig.',
+            ]);
+        }
+
+        if (!$user->active) {
+            Auth::logout();
+            $request->session()->invalidate();
+            $request->session()->regenerateToken();
+
+            return back()->withErrors([
+                'username' => 'Dieses Benutzerkonto ist nicht aktiv.',
+            ]);
+        }
+
+        $request->session()->regenerate();

        return redirect()->intended('/');
    }
@@ -0,0 +1,50 @@
+<?php
+
+namespace App\Mail\InvoiceMails;
+
+use App\Models\CostUnit;
+use App\Models\Invoice;
+use App\ValueObjects\Amount;
+use Illuminate\Mail\Mailable;
+use Illuminate\Mail\Mailables\Attachment;
+use Illuminate\Mail\Mailables\Content;
+use Illuminate\Mail\Mailables\Envelope;
+
+class InvoiceMailsSubmittedConfirmationMail extends Mailable {
+    public function __construct(
+        private Invoice $invoice,
+        private CostUnit $costUnit,
+    )
+    {
+        //
+    }
+
+    public function envelope(): Envelope
+    {
+        return new Envelope(
+            subject: 'Deine Abrechnung wurde erfolgreich eingereicht',
+        );
+    }
+
+    public function content(): Content
+    {
+        return new Content(
+            view: 'emails.invoices.submitted_confirmation',
+            with: [
+                'contactName' => $this->invoice->contact_name,
+                'costUnitName' => $this->costUnit->name,
+                'invoiceAmount' => Amount::fromString($this->invoice->amount)->toString(),
+                'invoiceType' => $this->invoice->invoiceType()->name,
+                'invoiceNumber' => $this->invoice->invoice_number,
+            ],
+        );
+    }
+
+    /**
+     * @return array<int, Attachment>
+     */
+    public function attachments(): array
+    {
+        return [];
+    }
+}
@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Middleware;
+
+use App\Enumerations\UserRole;
+use App\Providers\AuthCheckProvider;
+use Closure;
+
+class AdminRoleMiddleware
+{
+    public function handle($request, Closure $next)
+    {
+        if (!auth()->check()) {
+            return redirect('/login')->with('message', 'Du musst eingeloggt sein.');
+        }
+
+        $authCheck = new AuthCheckProvider();
+        $role = $authCheck->getUserRole();
+
+        if (!in_array($role, [UserRole::USER_ROLE_ADMIN, UserRole::USER_ROLE_GROUP_LEADER], true)) {
+            return redirect('/')->with('message', 'Du bist dazu nicht berechtigt.');
+        }
+
+        return $next($request);
+    }
+}
@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Middleware;
+
+use Closure;
+
+class LvOnlyMiddleware
+{
+    public function handle($request, Closure $next)
+    {
+        if (app('tenant')->slug !== 'lv') {
+            return redirect('/admin')->with('message', 'Diese Funktion ist nur auf LV-Ebene verfügbar.');
+        }
+
+        return $next($request);
+    }
+}
@@ -0,0 +1,54 @@
+<?php
+
+namespace App\Models;
+
+use App\Scopes\InstancedModel;
+use Illuminate\Database\Eloquent\Concerns\HasUuids;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+
+/**
+ * @property string $id
+ * @property string $tenant
+ * @property int $invoice_id
+ * @property int $cost_unit_id
+ * @property float $amount
+ * @property string $recipient_name
+ * @property string $recipient_iban
+ * @property string $payment_purpose
+ * @property bool $exported
+ * @property \DateTime|null $exported_at
+ */
+class SepaPaymentElement extends InstancedModel
+{
+    use HasUuids;
+
+    public $incrementing = false;
+    protected $keyType = 'string';
+
+    protected $fillable = [
+        'tenant',
+        'invoice_id',
+        'cost_unit_id',
+        'amount',
+        'recipient_name',
+        'recipient_iban',
+        'payment_purpose',
+        'exported',
+        'exported_at',
+    ];
+
+    protected $casts = [
+        'exported' => 'boolean',
+        'exported_at' => 'datetime',
+    ];
+
+    public function invoice(): BelongsTo
+    {
+        return $this->belongsTo(Invoice::class);
+    }
+
+    public function costUnit(): BelongsTo
+    {
+        return $this->belongsTo(CostUnit::class);
+    }
+}
@@ -3,6 +3,7 @@
 namespace App\Providers;

 use App\Enumerations\UserRole;
+use App\Models\User;

 class AuthCheckProvider {
    public function checkLoggedIn() : bool {
@@ -16,7 +17,7 @@ class AuthCheckProvider {
            return $user->active;
        }

-        if ($user->user_role_main === UserRole::USER_ROLE_ADMIN) {
+        if ($this->isMainAdministrator($user)) {
            return true;
        }

@@ -28,10 +29,39 @@ class AuthCheckProvider {
            return null;
        }

+        $user = auth()->user();
+
        if (app('tenant')->slug === 'lv') {
-            return auth()->user()->user_role_main;
+            return $user->user_role_main;
        }

-        return auth()->user()->user_role_local_group;
+        // "Bundesrecht steht über Landesrecht":
+        // Ein ROLE_ADMINISTRATOR auf LV-Ebene ist auf jedem Sub-Tenant automatisch Administrator,
+        // unabhängig von user_role_local_group.
+        if ($this->isMainAdministrator($user)) {
+            return UserRole::USER_ROLE_ADMIN;
+        }
+
+        return $user->user_role_local_group;
+    }
+
+    /**
+     * Gibt true zurück, wenn der Nutzer auf LV-Ebene Administrator ist.
+     * Diese Rolle hebt das lokale Rechtesystem für alle Sub-Tenants auf.
+     */
+    public function isMainAdministrator(?User $user = null) : bool {
+        $user ??= auth()->user();
+
+        return $user !== null
+            && $user->user_role_main === UserRole::USER_ROLE_ADMIN;
+    }
+
+    /**
+     * Bequemer Helper für die Berechtigungs-Checks im gesamten System.
+     * Gibt true zurück, wenn der aktuell eingeloggte Nutzer im Kontext des
+     * aktuellen Tenants effektiv Administrator ist.
+     */
+    public function isAdministrator() : bool {
+        return $this->getUserRole() === UserRole::USER_ROLE_ADMIN;
    }
 }
@@ -20,34 +20,21 @@ class GlobalDataProvider {
    public function __invoke() {
        $this->user = auth()->user();

+        $canAccessAdmin = false;
+        if (null !== $this->user) {
+            $authCheck = new AuthCheckProvider();
+            $effectiveRole = $authCheck->getUserRole();
+            $canAccessAdmin = in_array($effectiveRole, [UserRole::USER_ROLE_ADMIN, UserRole::USER_ROLE_GROUP_LEADER], true);
+        }
+
        return response()->json([
            'user' => null !== $this->user ? new UserResource($this->user)->toArray(request()) : null,
            'navbar' => $this->generateNavbar(),
            'tenant' => app('tenant'),
            'activeUsers' => $this->getActiveUsers(),
            'version' => config('app.version'),
-        ]);
-    }
-
-    public function getAllInvoiceTypes() : JsonResponse {
-        $invoiceTypes = [];
-        foreach (InvoiceType::orderBy('sort_order')->get() as $invoiceType) {
-            if (
-                $invoiceType->slug === InvoiceType::INVOICE_TYPE_OTHER
-            ) {
-                continue;
-            }
-
-            $invoiceTypes[] = [
-                'slug' => $invoiceType->slug,
-                'name' => $invoiceType->name
-            ];
-        }
-
-        $invoiceTypes[] = ['slug' => InvoiceType::INVOICE_TYPE_OTHER, 'name' => 'Sonstige Kosten'];
-
-        return response()->json([
-            'invoiceTypes' => $invoiceTypes
+            'currentEvent' => $this->getCurrentEventData(),
+            'canAccessAdmin' => $canAccessAdmin,
        ]);
    }

@@ -99,10 +86,47 @@ class GlobalDataProvider {
        ]);
    }

+    private function getCurrentEventData() : ?array {
+        if (null === $this->user) {
+            return null;
+        }
+
+        $currentEvent = new EventRepository()->getMyCurrentEvent();
+        if (null === $currentEvent) {
+            return null;
+        }
+
+        return [
+            'identifier' => $currentEvent->identifier,
+            'name' => $currentEvent->name,
+        ];
+    }
+
+    public function getAllInvoiceTypes() : JsonResponse {
+        $invoiceTypes = [];
+        foreach (InvoiceType::orderBy('sort_order')->get() as $invoiceType) {
+            if (
+                $invoiceType->slug === InvoiceType::INVOICE_TYPE_OTHER
+            ) {
+                continue;
+            }
+
+            $invoiceTypes[] = [
+                'slug' => $invoiceType->slug,
+                'name' => $invoiceType->name
+            ];
+        }
+
+        $invoiceTypes[] = ['slug' => InvoiceType::INVOICE_TYPE_OTHER, 'name' => 'Sonstige Kosten'];
+
+        return response()->json([
+            'invoiceTypes' => $invoiceTypes
+        ]);
+    }
+
    private function generateNavbar() : array {
        $eventRepository = new EventRepository();

-
        $navigation = [
            'personal' => [],
            'common' => [],
@@ -116,9 +140,11 @@ class GlobalDataProvider {
            $navigation['personal'][] = ['url' => '/personal-data', 'display' => 'Meine Daten'];
            $navigation['personal'][] = ['url' => '/messages', 'display' => 'Meine Nachrichten'];

+            $authCheck = new AuthCheckProvider();
+            $effectiveRole = $authCheck->getUserRole();
+
            if (
-                in_array($this->user->user_role_local_group, [UserRole::USER_ROLE_ADMIN, UserRole::USER_ROLE_GROUP_LEADER] ) ||
-                $this->user->user_role_main === UserRole::USER_ROLE_ADMIN
+                in_array($effectiveRole, [UserRole::USER_ROLE_ADMIN, UserRole::USER_ROLE_GROUP_LEADER], true)
            ) {
                $navigation['costunits'][] = ['url' => '/cost-unit/list', 'display' => 'Kostenstellen'];
                $navigation['costunits'][] = ['url' => '/cost-unit/create', 'display' => 'Neue laufende Tätigkeit'];
@@ -2,25 +2,23 @@

 namespace App\Providers;

-use App\Models\Invoice;
-use App\Resources\InvoiceResource;
+use App\Models\SepaPaymentElement;
 use DOMDocument;
 use Exception;
-use Illuminate\Http\Request;

 class PainFileProvider {
    public string $senderIban;
    public string $senderName;
    public string $senderBic;

-    /* @var Invoice[] */
-    public array $invoices;
+    /** @var SepaPaymentElement[] */
+    public array $elements;

-    public function __construct(string $senderIban, string $senderName, string $senderBic, array $invoices) {
+    public function __construct(string $senderIban, string $senderName, string $senderBic, array $elements) {
        $this->senderIban = $senderIban;
        $this->senderName = $senderName;
        $this->senderBic = $senderBic;
-        $this->invoices = $invoices;
+        $this->elements = $elements;
    }

    public function createPainFileContent() : string {
@@ -46,9 +44,9 @@ class PainFileProvider {

        $grp_hdr->appendChild($doc->createElement('MsgId', uniqid('MSG')));
        $grp_hdr->appendChild($doc->createElement('CreDtTm', date('c')));
-        $grp_hdr->appendChild($doc->createElement('NbOfTxs', count($this->invoices)));
+        $grp_hdr->appendChild($doc->createElement('NbOfTxs', count($this->elements)));

-        $totalAmount = array_sum(array_column($this->invoices, 'amount'));
+        $totalAmount = array_sum(array_map(fn(SepaPaymentElement $e) => $e->amount, $this->elements));
        $grp_hdr->appendChild($doc->createElement('CtrlSum', number_format($totalAmount, 2, '.', '')));

        $initg_pty = $doc->createElement('InitgPty');
@@ -62,7 +60,7 @@ class PainFileProvider {
        $pmt_inf->appendChild($doc->createElement('PmtInfId', uniqid('PMT')));
        $pmt_inf->appendChild($doc->createElement('PmtMtd', 'TRF'));
        $pmt_inf->appendChild($doc->createElement('BtchBookg', 'false'));
-        $pmt_inf->appendChild($doc->createElement('NbOfTxs', count($this->invoices)));
+        $pmt_inf->appendChild($doc->createElement('NbOfTxs', count($this->elements)));
        $pmt_inf->appendChild($doc->createElement('CtrlSum', number_format($totalAmount, 2, '.', '')));

        $pmt_tp_inf = $doc->createElement('PmtTpInf');
@@ -90,9 +88,7 @@ class PainFileProvider {
        $dbtr_agt->appendChild($id);
        $pmt_inf->appendChild($dbtr_agt);

-        foreach ($this->invoices as $index => $invoice) {
-            $invoiceResource = new InvoiceResource($invoice)->toArray(new Request());
-
+        foreach ($this->elements as $index => $element) {
            $cdt_trf_tx_inf = $doc->createElement('CdtTrfTxInf');

            $pmt_id = $doc->createElement('PmtId');
@@ -100,23 +96,23 @@ class PainFileProvider {
            $cdt_trf_tx_inf->appendChild($pmt_id);

            $amt = $doc->createElement('Amt');
-            $instd_amt = $doc->createElement('InstdAmt', number_format($invoice['amount'], 2, '.', ''));
+            $instd_amt = $doc->createElement('InstdAmt', number_format($element->amount, 2, '.', ''));
            $instd_amt->setAttribute('Ccy', 'EUR');
            $amt->appendChild($instd_amt);
            $cdt_trf_tx_inf->appendChild($amt);

            $cdtr = $doc->createElement('Cdtr');
-            $cdtr->appendChild($doc->createElement('Nm', $invoice['contact_bank_owner']));
+            $cdtr->appendChild($doc->createElement('Nm', $element->recipient_name));
            $cdt_trf_tx_inf->appendChild($cdtr);

            $cdtr_acct = $doc->createElement('CdtrAcct');
            $cdtr_id = $doc->createElement('Id');
-            $cdtr_id->appendChild($doc->createElement('IBAN', str_replace(' ', '', $invoice['contact_bank_iban'])));
+            $cdtr_id->appendChild($doc->createElement('IBAN', str_replace(' ', '', $element->recipient_iban)));
            $cdtr_acct->appendChild($cdtr_id);
            $cdt_trf_tx_inf->appendChild($cdtr_acct);

            $rmt_inf = $doc->createElement('RmtInf');
-            $rmt_inf->appendChild($doc->createElement('Ustrd', $invoiceResource['paymentPurpose']));
+            $rmt_inf->appendChild($doc->createElement('Ustrd', $element->payment_purpose));
            $cdt_trf_tx_inf->appendChild($rmt_inf);

            $pmt_inf->appendChild($cdt_trf_tx_inf);
@@ -2,6 +2,7 @@

 namespace App\Providers;

+use App\Enumerations\UserRole;
 use Illuminate\Auth\EloquentUserProvider;

 class TenantUserProvider extends EloquentUserProvider
@@ -18,15 +19,20 @@ class TenantUserProvider extends EloquentUserProvider
            }
        }

+        // Auf "lv" gilt grundsätzlich keine local_group-Einschränkung.
        if (app('tenant')->slug === 'lv') {
            return $query->first();
        }

-        $query->where([
-            'local_group' => app('tenant')->slug,
-            'active' => true
-
-        ]);
+        // Auf Sub-Tenants:
+        //   - Entweder gehört der Nutzer zum aktuellen Tenant (local_group)
+        //   - ODER er ist auf LV-Ebene Administrator
+        //     -> "Bundesrecht steht über Landesrecht": Login überall möglich.
+        $query->where('active', true)
+            ->where(function ($q) {
+                $q->where('local_group', app('tenant')->slug)
+                  ->orWhere('user_role_main', UserRole::USER_ROLE_ADMIN);
+            });

        return $query->first();
    }
@@ -7,6 +7,7 @@ use App\Enumerations\InvoiceStatus;
 use App\Enumerations\InvoiceType;
 use App\Enumerations\UserRole;
 use App\Models\CostUnit;
+use App\Providers\AuthCheckProvider;
 use App\Resources\CostUnitResource;
 use App\ValueObjects\Amount;
 use Illuminate\Database\Capsule\Manager as Capsule;
@@ -65,34 +66,20 @@ class CostUnitRepository {
    }

    public function getCostUnitsByCriteria(array $criteria, bool $forDisplay = true, $disableAccessCheck = false) : array {
-        $tenant = app('tenant');
-
-        $canSeeAll = false;
        $user = Auth()->user();

        if ($disableAccessCheck) {
            $canSeeAll = true;
        } else {
-            if ($tenant->slug !== 'lv') {
-                if (
-                    $user->user_role_main === UserRole::USER_ROLE_ADMIN ||
-                    in_array($user->user_role_local_group, [UserRole::USER_ROLE_GROUP_LEADER, UserRole::USER_ROLE_ADMIN])
-                ) {
-                    $canSeeAll = true;
-                }
-            } else {
-                if (
-                    in_array($user->user_role_main, [UserRole::USER_ROLE_GROUP_LEADER, UserRole::USER_ROLE_ADMIN])
-                ) {
-                    $canSeeAll = true;
-                }
-            }
+            $canSeeAll = in_array(new AuthCheckProvider()->getUserRole(), [
+                UserRole::USER_ROLE_ADMIN, UserRole::USER_ROLE_GROUP_LEADER
+            ]);
        }

        $visibleCostUnits = [];
        /** @var CostUnit $costUnit */
        foreach (Costunit::where($criteria)->get() as $costUnit) {
-            if ($canSeeAll || $disableAccessCheck || $costUnit->treasurers()->where('user_id', $user->id)->exists() ) {
+            if ($canSeeAll || $costUnit->treasurers()->where('user_id', $user->id)->exists() ) {
                if ($forDisplay) {
                    $visibleCostUnits[] = new CostUnitResource($costUnit)->toArray(request());
                } else {
@@ -6,6 +6,7 @@ use App\Enumerations\ParticipationType;
 use App\Enumerations\UserRole;
 use App\Models\CostUnit;
 use App\Models\Event;
+use App\Providers\AuthCheckProvider;
 use App\Resources\CostUnitResource;
 use Illuminate\Database\Eloquent\Collection;
 use Illuminate\Http\Request;
@@ -19,13 +20,25 @@ class EventRepository {

    }

+    public function getMyCurrentEvent() : ?Event {
+        $events = $this->getEventsByCriteria([
+            ['archived', '=', false],
+            ['start_date', '<=', now()],
+            ['end_date', '>=', now()],
+        ], true);
+        if (count($events) !== 1) {
+            return null;
+        }
+        return $events[0];
+    }
+
    public function getUpcoming(int $maxCount = 5, bool $accessCheck = true) : array {
        $events = [];
        foreach ( $this->getEventsByCriteria([
            'archived' => false,

        ],$accessCheck) as $event) {
-            if ($event->start_date > now()) {
+            if ($event->end_date >= now()) {
                $event = $event->toResource()->toArray(new Request());

                $events[] = $event;
@@ -64,35 +77,20 @@ class EventRepository {
    }

    public function getEventsByCriteria(array $criteria, $accessCheck = true) : array {
-        $tenant = app('tenant');
-
-        $canSeeAll = false;
        $user = Auth()->user();

        if (!$accessCheck) {
            $canSeeAll = true;
        } else {
-            if ($tenant->slug !== 'lv') {
-                if (
-                    $user->user_role_main === UserRole::USER_ROLE_ADMIN ||
-                    in_array($user->user_role_local_group, [UserRole::USER_ROLE_GROUP_LEADER, UserRole::USER_ROLE_ADMIN])
-                ) {
-                    $canSeeAll = true;
-                }
-            } else {
-                if (
-                    in_array($user->user_role_main, [UserRole::USER_ROLE_GROUP_LEADER, UserRole::USER_ROLE_ADMIN])
-                ) {
-                    $canSeeAll = true;
-                }
-            }
+            $canSeeAll = in_array(new AuthCheckProvider()->getUserRole(), [
+                UserRole::USER_ROLE_ADMIN, UserRole::USER_ROLE_GROUP_LEADER
+            ]);
        }

        $visibleEvents = [];
        /** @var Event $event */
        foreach (Event::where($criteria)->orderBy('start_date')->get() as $event) {
-
-            if ($canSeeAll || !$accessCheck || $event->eventManagers()->where('user_id', $user->id)->exists()) {
+            if ($canSeeAll || $event->eventManagers()->where('user_id', $user->id)->exists()) {
                $visibleEvents[] = $event;
            }
        }
@@ -6,6 +6,7 @@ use App\Enumerations\InvoiceStatus;
 use App\Enumerations\UserRole;
 use App\Models\CostUnit;
 use App\Models\Invoice;
+use App\Providers\AuthCheckProvider;
 use App\Resources\InvoiceResource;
 use App\ValueObjects\Amount;
 use Illuminate\Database\Eloquent\Collection;
@@ -83,19 +84,9 @@ class InvoiceRepository {
            return $invoice;
        }

-        $user = auth()->user();
-        if ($user->user_role_main === UserRole::USER_ROLE_ADMIN) {
-            return $invoice;
-        }
+        return in_array(new AuthCheckProvider()->getUserRole(), [
+            UserRole::USER_ROLE_ADMIN, UserRole::USER_ROLE_GROUP_LEADER
+        ]) ? $invoice : null;

-        if (app('tenant')->slug === 'lv' && $user->user_role_main === UserRole::USER_ROLE_GROUP_LEADER) {
-            return $invoice;
-        }
-
-        if (app('tenant')->slug !== 'lv' && $user->local_group === app('tenant')->slug && $user->user_role_local_group === UserRole::USER_ROLE_GROUP_LEADER) {
-            return $invoice;
-        }
-
-        return null;
    }
 }
@@ -331,7 +331,7 @@ class EventResource extends JsonResource{
        $basicFee = $basicFee->multiply($this->getMultiplier());

        if ($this->event->pay_per_day) {
-            $days = $arrival->diff($departure)->days;
+            $days = $arrival->diff($departure)->days + 1;
            $basicFee = $basicFee->multiply($days);
        }

@@ -2,6 +2,8 @@

 namespace App\Scopes;

+use App\Domains\Admin\Repositories\AdminTenantRepository;
+use App\Domains\Admin\Repositories\AdminUserRepository;
 use App\Models\Tenant;
 use App\Providers\AuthCheckProvider;
 use App\Repositories\CostUnitRepository;
@@ -23,6 +25,8 @@ abstract class CommonController {
    protected EventRepository $events;
    protected EventParticipantRepository $eventParticipants;
    protected EstimatesRepository $estimates;
+    protected AdminUserRepository $adminUsers;
+    protected AdminTenantRepository $adminTenants;

    public function __construct() {
        $this->tenant = app('tenant');
@@ -33,6 +37,8 @@ abstract class CommonController {
        $this->events = new EventRepository();
        $this->eventParticipants = new EventParticipantRepository();
        $this->estimates = new EstimatesRepository();
+        $this->adminUsers = new AdminUserRepository();
+        $this->adminTenants = new AdminTenantRepository();
    }

    protected function checkAuth() {
@@ -0,0 +1,23 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+    public function up(): void
+    {
+        Schema::table('tenants', function (Blueprint $table) {
+            $table->longText('gdpr_text')->nullable()->change();
+            $table->longText('impress_text')->nullable()->change();
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::table('tenants', function (Blueprint $table) {
+            $table->string('gdpr_text')->nullable()->change();
+            $table->string('impress_text')->nullable()->change();
+        });
+    }
+};
@@ -0,0 +1,31 @@
+<?php
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration {
+    public function up(): void
+    {
+        Schema::create('sepa_payment_elements', function (Blueprint $table) {
+            $table->uuid('id')->primary();
+            $table->string('tenant');
+            $table->foreignId('invoice_id')->constrained('invoices', 'id')->restrictOnDelete()->cascadeOnUpdate();
+            $table->foreignId('cost_unit_id')->constrained('cost_units', 'id')->restrictOnDelete()->cascadeOnUpdate();
+            $table->float('amount', 2);
+            $table->string('recipient_name');
+            $table->string('recipient_iban');
+            $table->string('payment_purpose');
+            $table->boolean('exported')->default(false);
+            $table->dateTime('exported_at')->nullable();
+
+            $table->foreign('tenant')->references('slug')->on('tenants')->restrictOnDelete()->cascadeOnUpdate();
+
+            $table->timestamps();
+        });
+    }
+
+    public function down(): void
+    {
+        Schema::dropIfExists('sepa_payment_elements');
+    }
+};
@@ -57,8 +57,8 @@ h1, h2, h3, h4, h5, h6 {

 .header .user-info {
    position: relative;
-    right: calc(-100% + 190px);
-    width: 195px;
+    right: calc(-100% + 250px);
+    width: 240px;
    overflow: hidden;
    border-radius: 50px 0 0 50px;
    text-align: right;
@@ -108,11 +108,11 @@ h1, h2, h3, h4, h5, h6 {
    display: flex;
    align-items: center;
    justify-content: center;
+    height: 180px;
 }

 .logo img {
-    width: 135px !important;
-    height: 70px !important;
+    width: 100% !important;
 }

 .footer {
@@ -0,0 +1,459 @@
+<script setup>
+import {reactive, onMounted, ref, computed} from 'vue';
+import Icon from "../../../app/Views/Components/Icon.vue";
+import {toast} from "vue3-toastify";
+import {useAjax} from "../components/ajaxHandler.js";
+
+const { request } = useAjax()
+
+const globalProps = reactive({
+    tenant: '',
+    user: null,
+    currentPath: '/',
+    errors: {},
+    availableLocalGroups: [],
+    message: '',
+    currentEvent: null,
+    version: '',
+});
+
+const sidebarOpen = ref(false);
+
+function toggleSidebar() {
+    sidebarOpen.value = !sidebarOpen.value;
+}
+
+function closeSidebar() {
+    sidebarOpen.value = false;
+}
+
+onMounted(async () => {
+    const response = await fetch('/api/v1/core/retrieve-global-data');
+    const data = await response.json();
+    Object.assign(globalProps, data);
+
+    const messageResponse = await request('/api/v1/core/retrieve-messages', {
+        method: 'GET',
+    })
+
+    if (messageResponse.message !== '') {
+        if (messageResponse.messageType === 'success') {
+            toast.success(messageResponse.message)
+        } else {
+            toast.error(messageResponse.message)
+        }
+    }
+});
+
+const currentPath = window.location.pathname;
+
+const props = defineProps({
+    title: { type: String, default: 'Administration' },
+    flash: { type: Object, default: () => ({}) }
+});
+
+</script>
+
+<template>
+    <div class="app-layout">
+        <!-- Mobile Overlay -->
+        <div class="sidebar-overlay" :class="{ active: sidebarOpen }" @click="closeSidebar"></div>
+
+        <div class="main">
+            <!-- Header -->
+            <div class="header">
+                <button class="hamburger-btn" @click="toggleSidebar" aria-label="Menü öffnen">
+                    <span></span>
+                    <span></span>
+                    <span></span>
+                </button>
+
+                <div class="left-side">
+                    <h1>{{ props.title }}</h1>
+                    <label id="show_username" v-if="globalProps.user !== null">Willkommen, {{ globalProps.user.nicename }}</label>
+                </div>
+
+                <div class="header-actions" v-if="globalProps.user !== null">
+                    <div class="user-info">
+                        <a href="/" class="header-link-anonymous" title="Zurück zur Anwendung">
+                            <Icon name="desktop" />
+                        </a>
+                        <a href="/messages" class="header-link-anonymous" title="Meine Nachrichten">
+                            <Icon name="envelope" />
+                        </a>
+                        <a href="/profile" class="header-link-anonymous" title="Mein Profil">
+                            <Icon name="user" />
+                        </a>
+                        <a href="/logout" class="header-link-anonymous-logout" title="Abmelden">
+                            <Icon name="lock" />
+                        </a>
+                    </div>
+                </div>
+            </div>
+
+            <!-- Flexbox: Sidebar + Content -->
+            <div class="flexbox">
+                <div class="sidebar" :class="{ 'sidebar-open': sidebarOpen }">
+                    <div class="logo">
+                        <img src="../../../public/images/mareike.png" alt="Logo" />
+                    </div>
+                    <nav class="nav">
+                        <ul class="nav-links">
+                            <li>
+                                <a href="/admin/tenant" @click="closeSidebar">
+                                    {{ globalProps.tenant.slug === 'lv' ? 'LV-Daten' : 'Stammesdaten' }}
+                                </a>
+                            </li>
+                        </ul>
+                        <ul class="nav-links">
+                            <li v-if="globalProps.tenant.slug === 'lv'">
+                                <a href="/admin/tenants" @click="closeSidebar">Stämme</a>
+                            </li>
+                            <li>
+                                <a href="/admin/users" @click="closeSidebar">Benutzer*innen</a>
+                            </li>
+                        </ul>
+                    </nav>
+                </div>
+
+                <div class="content-area">
+                    <div class="content">
+                        <slot />
+                    </div>
+                </div>
+            </div>
+
+            <!-- Footer -->
+            <footer class="footer">
+                <div class="footer-inner">
+                    <span>Version {{ globalProps.version }}</span>
+                    <span class="footer-hide-mobile">mareike – Modernes Anmeldesystem und richtig einfache Kostenerfassung</span>
+                    <a href="/impress" class="footer-link">Impressum</a>
+                    <a href="/gdpr" class="footer-link">Datenschutzerklärung</a>
+                    <span>&copy; 2022 – 2026</span>
+                </div>
+            </footer>
+        </div>
+
+        <transition name="fade">
+            <div v-if="flash.message" class="toaster">
+                {{ flash.message }}
+            </div>
+        </transition>
+    </div>
+</template>
+
+<style scoped>
+/* ─── Header ─── */
+.header {
+    display: flex;
+    align-items: center;
+    height: 80px;
+    background: #ffffff;
+    box-shadow: 0 1px 3px rgba(0,0,0,0.1);
+    padding: 0;
+    position: relative;
+    z-index: 50;
+    flex-shrink: 0;
+}
+
+.left-side {
+    flex: 1;
+    padding: 0 20px;
+    overflow: hidden;
+}
+
+.left-side h1 {
+    margin: 0;
+    font-size: 1.4rem;
+    white-space: nowrap;
+    overflow: hidden;
+    text-overflow: ellipsis;
+}
+
+#show_username {
+    display: block;
+    font-weight: bold;
+    font-size: 0.85rem;
+    white-space: nowrap;
+    overflow: hidden;
+    text-overflow: ellipsis;
+}
+
+.header-actions {
+    display: flex;
+    align-items: center;
+    flex-shrink: 0;
+    width: 260px;
+}
+
+.header-link-anonymous,
+.header-link-anonymous-logout {
+    color: #000000;
+    font-weight: bold;
+    text-decoration: none;
+    background-color: #ffffff;
+    padding: 10px 20px;
+    display: inline-block;
+}
+
+.header-link-anonymous:hover {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+.header-link-anonymous-logout:hover {
+    background-color: #ff0000;
+    color: #ffffff;
+}
+
+/* ─── Hamburger ─── */
+.hamburger-btn {
+    display: none;
+    flex-direction: column;
+    justify-content: center;
+    align-items: center;
+    gap: 5px;
+    width: 50px;
+    height: 80px;
+    border: none;
+    background: transparent;
+    cursor: pointer;
+    flex-shrink: 0;
+    padding: 0 12px;
+}
+
+.hamburger-btn span {
+    display: block;
+    width: 24px;
+    height: 3px;
+    background-color: #333;
+    border-radius: 2px;
+    transition: all 0.2s;
+}
+
+/* ─── Layout ─── */
+.app-layout {
+    display: flex;
+    height: 100vh;
+    background: #f0f2f5;
+    font-family: sans-serif;
+    overflow: hidden;
+}
+
+.main {
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    overflow: hidden;
+    margin: 20px;
+    box-shadow: 20px 20px 15px rgba(0, 0, 0, 0.1);
+    border-radius: 0 10px 0 0;
+}
+
+.flexbox {
+    display: flex;
+    flex: 1;
+    background-color: #FAFAFB;
+    overflow: hidden;
+    gap: 1px;
+}
+
+/* ─── Sidebar ─── */
+.sidebar {
+    flex-basis: 275px;
+    flex-shrink: 0;
+    box-shadow: 2px 0 5px rgba(0,0,0,0.1);
+    display: flex;
+    flex-direction: column;
+    background-color: #ffffff;
+    overflow-y: auto;
+    transition: transform 0.3s ease;
+}
+
+.sidebar-overlay {
+    display: none;
+    position: fixed;
+    inset: 0;
+    background: rgba(0,0,0,0.4);
+    z-index: 99;
+}
+
+.logo {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: 10px 0;
+    height: 180px;
+    width: 100%;
+    margin-bottom: 30px;
+}
+
+.logo img {
+    object-fit: contain;
+}
+
+/* ─── Nav ─── */
+.nav {
+    flex: 1;
+}
+
+.nav ul {
+    list-style: none;
+    padding: 0;
+    margin: 0;
+    border-bottom: 1px solid #ddd;
+}
+
+.nav-links li a {
+    color: #b6b6b6;
+    background-color: #fff;
+    padding: 16px 25px;
+    display: block;
+    text-decoration: none;
+    font-weight: bold;
+}
+
+.nav a:hover {
+    background-color: #1d4899;
+    color: #ffffff;
+}
+
+/* ─── Content ─── */
+.content-area {
+    flex: 1;
+    display: flex;
+    flex-direction: column;
+    overflow-y: auto;
+    overflow-x: hidden;
+}
+
+.content {
+    padding: 30px 20px;
+    flex: 1;
+}
+
+/* ─── Footer ─── */
+.footer {
+    background: #666666;
+    border-top: 1px solid #ddd;
+    color: #ffffff;
+    padding: 10px 15px;
+    font-size: 11pt;
+    font-weight: bold;
+    flex-shrink: 0;
+}
+
+.footer-inner {
+    display: flex;
+    flex-wrap: wrap;
+    gap: 10px 20px;
+    justify-content: space-between;
+    align-items: center;
+}
+
+.footer-link {
+    color: #ffffff;
+    text-decoration: none;
+}
+
+.footer-link:hover {
+    text-decoration: underline;
+}
+
+/* ═══════════════════════════════════════════
+   TABLET (640px – 1023px)
+═══════════════════════════════════════════ */
+@media (max-width: 1023px) {
+    .app-layout {
+        margin: 0;
+        height: 100vh;
+    }
+
+    .main {
+        margin: 0;
+        border-radius: 0;
+        box-shadow: none;
+    }
+
+    .hamburger-btn {
+        display: flex;
+    }
+
+    .sidebar {
+        position: fixed;
+        left: 0;
+        top: 0;
+        bottom: 0;
+        z-index: 100;
+        transform: translateX(-100%);
+        width: 260px;
+        flex-basis: 260px;
+    }
+
+    .sidebar.sidebar-open {
+        transform: translateX(0);
+    }
+
+    .sidebar-overlay.active {
+        display: block;
+    }
+
+    .header-link-anonymous,
+    .header-link-anonymous-logout {
+        padding: 10px 12px;
+        font-size: 0.9rem;
+    }
+
+    .left-side h1 {
+        font-size: 1.1rem;
+    }
+}
+
+/* ═══════════════════════════════════════════
+   SMARTPHONE (< 640px)
+═══════════════════════════════════════════ */
+@media (max-width: 639px) {
+    .header {
+        height: 60px;
+    }
+
+    .hamburger-btn {
+        height: 60px;
+    }
+
+    .left-side h1 {
+        font-size: 1rem;
+    }
+
+    #show_username {
+        display: none;
+    }
+
+    .header-link-anonymous,
+    .header-link-anonymous-logout {
+        padding: 6px 8px;
+        font-size: 0.75rem;
+        display: inline;
+    }
+
+    .footer-hide-mobile {
+        display: none;
+    }
+
+    .footer-inner {
+        justify-content: center;
+        font-size: 9pt;
+        gap: 6px 12px;
+    }
+
+    .content {
+        padding: 15px 10px;
+    }
+
+    .sidebar {
+        width: 240px;
+        flex-basis: 240px;
+    }
+}
+</style>
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
th.guenther	e09987f5a8	Fixed permission management	2026-06-23 18:46:01 +02:00
th.guenther	5c514e9ff5	Merge pull request 'Improvements' (#9 ) from dev-4.5.1 into main Reviewed-on: #9	2026-06-22 21:08:28 +02:00
th.guenther	bc60461dac	Improvements	2026-06-22 21:07:53 +02:00
th.guenther	6848fbd95f	Merge pull request 'Development 4.4.2' (#8 ) from development-4.4.2 into main Fixed Login for Superuser Display Events in Widgets until their end date is reached Prevent linking invoice to user account if foreign payment Direct link to current event in mobile mode New SEPA logic Added legal data Added admin layout Admin function for tenant Tenant management User management	2026-06-21 23:31:26 +02:00
th.guenther	012ebb6538	Prepared for release	2026-06-21 22:13:23 +02:00
th.guenther	c1ef1d71ad	Code Styling	2026-06-21 22:12:05 +02:00
th.guenther	aebb2f9aaa	User management	2026-06-21 21:56:35 +02:00
th.guenther	cfc7c7eee2	Tenant management	2026-06-21 20:46:16 +02:00
th.guenther	1b9384dad1	Admin function for tenant	2026-06-21 18:02:01 +02:00
th.guenther	fed54514c8	Admin function for tenant	2026-06-21 18:00:20 +02:00
th.guenther	12f05ceb09	Added admin layout	2026-06-21 16:45:24 +02:00
th.guenther	5f56ef94a6	Added admin layout	2026-06-21 16:44:58 +02:00
th.guenther	79bb186234	Added admin layout	2026-06-21 16:44:01 +02:00
th.guenther	a012c16425	Added admin layout	2026-06-21 16:42:37 +02:00
th.guenther	a8205a4f96	Added legal data	2026-06-21 15:18:26 +02:00
th.guenther	dbcebbb2c4	Merge pull request 'New SEPA logic' (#7 ) from new-sepa-procedure into development-4.4.2 Reviewed-on: #7	2026-06-21 01:29:57 +02:00
th.guenther	63c7b8dfb1	New SEPA logic	2026-06-21 01:28:28 +02:00
th.guenther	e9aa66a860	Direct liunk to current event in mobile mode	2026-06-21 00:35:25 +02:00
th.guenther	51c4055c47	Prevent linking invoice to user account if foreign payment	2026-06-20 23:20:42 +02:00
th.guenther	2348663fd8	Display Events in Widgets until their end date is reached	2026-06-20 18:06:29 +02:00
th.guenther	a83cec94ab	Fixed Login for Superuser	2026-06-20 18:02:00 +02:00