From e2dbb796e699b19f717e497b41cb32056cd1ac5b Mon Sep 17 00:00:00 2001
From: Dotty Dotter <dotty@Mac.wideopen.space>
Date: Sun, 3 May 2026 21:35:01 +0200
Subject: [PATCH] feat: Rolle im User-Profil anzeigen (Topbar-Badge)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Topbar zeigt jetzt:
- Username (wie bisher)
- "ADMIN"-Badge (teal) wenn user.roles enthaelt 'admin' oder 'gwoe-admin'
- Tooltip mit allen Rollen beim Hover

Macht sichtbar, ob man Admin-Rechte hat — wichtig fuer Sichtbarkeit
von /v2/batch und /v2/admin/* Eintraegen.

Plus: Rolle gwoe-admin in Keycloak (Realm collaboration) angelegt
+ User tobias zugewiesen. Auth-Code prueft realm_access.roles auf
'admin' ODER 'gwoe-admin'.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 app/templates/v2/base.html | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/app/templates/v2/base.html b/app/templates/v2/base.html
index 71e47f3..a191473 100644
--- a/app/templates/v2/base.html
+++ b/app/templates/v2/base.html
@@ -272,10 +272,17 @@
 
   function renderAuthenticated(container, user) {
     var name = user.preferred_username || user.name || user.sub || 'Konto';
+    var roles = Array.isArray(user.roles) ? user.roles : [];
+    var isAdmin = roles.indexOf('admin') !== -1 || roles.indexOf('gwoe-admin') !== -1;
+    var rolesTitle = roles.length ? 'Rollen: ' + roles.join(', ') : 'Keine speziellen Rollen';
+    var adminBadge = isAdmin
+      ? '<span style="display:inline-block;margin-left:4px;padding:1px 6px;background:rgba(0,157,165,0.2);color:var(--ecg-teal);border-radius:9px;font-size:9px;font-weight:700;text-transform:uppercase;letter-spacing:0.05em;">admin</span>'
+      : '';
     container.innerHTML =
-      '<span style="' + BTN_BASE + ';cursor:default;gap:4px;">' +
+      '<span style="' + BTN_BASE + ';cursor:default;gap:4px;" title="' + rolesTitle + '">' +
         '{{ icon("user", 13) | replace("\"", "\'") }} ' +
-        '<span style="max-width:110px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;" title="' + name + '">' + name + '</span>' +
+        '<span style="max-width:110px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;">' + name + '</span>' +
+        adminBadge +
       '</span>' +
       '&nbsp;' +
       '<button style="' + BTN_BASE + '" onclick="v2AuthLogout()" aria-label="Abmelden">' +