bug fixes

backend/src/routes/atemschutz.routes.ts

@@ -3,8 +3,8 @@ import atemschutzController from '../controllers/atemschutz.controller';
 import { authenticate } from '../middleware/auth.middleware';
 import { requireGroups } from '../middleware/rbac.middleware';
 
-const ADMIN_GROUPS = ['dashboard_admin'];
-const WRITE_GROUPS = ['dashboard_admin', 'dashboard_atemschutz'];
+const ADMIN_GROUPS = ['dashboard_admin', 'dashboard_kommando', 'dashboard_atemschutz', 'dashboard_moderator'];
+const WRITE_GROUPS = ['dashboard_admin', 'dashboard_kommando', 'dashboard_atemschutz', 'dashboard_moderator'];
 
 const router = Router();
 

backend/src/routes/events.routes.ts

@@ -143,4 +143,15 @@ router.delete(
   eventsController.cancelEvent.bind(eventsController)
 );
 
+/**
+ * POST /api/events/:id/delete
+ * Hard-delete an event permanently. Requires admin or moderator.
+ */
+router.post(
+  '/:id/delete',
+  authenticate,
+  requireGroups(WRITE_GROUPS),
+  eventsController.deleteEvent.bind(eventsController)
+);
+
 export default router;