new features

backend/src/database/migrations/045_add_permissions_batch.sql

@@ -36,12 +36,26 @@ INSERT INTO permissions (id, feature_group_id, label, description, sort_order) V
   ('admin:write', 'admin', 'Bearbeiten', 'Admin-Einstellungen ändern',    2)
 ON CONFLICT (id) DO NOTHING;
 
--- Re-seed wissen grants for all groups (in case they were cascade-deleted)
-INSERT INTO group_permissions (authentik_group, permission_id)
-SELECT DISTINCT authentik_group, 'wissen:view'
-FROM group_permissions
-WHERE authentik_group LIKE 'dashboard_%'
-ON CONFLICT DO NOTHING;
+-- Re-seed wissen + vikunja + dashboard grants for all dashboard groups
+-- (these may have been cascade-deleted when feature groups were missing)
+DO $$
+DECLARE
+  grp TEXT;
+BEGIN
+  FOR grp IN
+    SELECT DISTINCT authentik_group FROM group_permissions WHERE authentik_group LIKE 'dashboard_%'
+  LOOP
+    -- wissen permissions for everyone
+    INSERT INTO group_permissions (authentik_group, permission_id)
+    VALUES (grp, 'wissen:view'), (grp, 'wissen:widget_recent'), (grp, 'wissen:widget_search')
+    ON CONFLICT DO NOTHING;
+
+    -- dashboard widget permissions for everyone
+    INSERT INTO group_permissions (authentik_group, permission_id)
+    VALUES (grp, 'dashboard:widget_links'), (grp, 'dashboard:widget_banner')
+    ON CONFLICT DO NOTHING;
+  END LOOP;
+END $$;
 
 -- ═══════════════════════════════════════════════════════════════════════════
 -- 1. New permissions