feat: responsive widgets, atemschutz permission UX, event hard-delete

- fix dashboard grid: use auto-fill instead of auto-fit for equal-width widgets
- atemschutz: skip stats/members API calls for non-privileged users, hide
  empty Aktionen column, add personal status subtitle
- kalender: add permanent delete option for events with confirmation dialog

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/src/controllers/atemschutz.controller.ts

@@ -18,9 +18,11 @@ function getUserId(req: Request): string {
 // ── Controller ────────────────────────────────────────────────────────────────
 
 class AtemschutzController {
-  async list(_req: Request, res: Response): Promise<void> {
+  async list(req: Request, res: Response): Promise<void> {
     try {
-      const records = await atemschutzService.getAll();
+      const userGroups: string[] = (req.user as any)?.groups ?? [];
+      const userId = getUserId(req);
+      const records = await atemschutzService.getAll(userGroups, userId);
       res.status(200).json({ success: true, data: records });
     } catch (error) {
       logger.error('Atemschutz list error', { error });
@@ -47,9 +49,11 @@ class AtemschutzController {
     }
   }
 
-  async getStats(_req: Request, res: Response): Promise<void> {
+  async getStats(req: Request, res: Response): Promise<void> {
     try {
-      const stats = await atemschutzService.getStats();
+      const userGroups: string[] = (req.user as any)?.groups ?? [];
+      const userId = getUserId(req);
+      const stats = await atemschutzService.getStats(userGroups, userId);
       res.status(200).json({ success: true, data: stats });
     } catch (error) {
       logger.error('Atemschutz getStats error', { error });

backend/src/controllers/events.controller.ts

@@ -265,6 +265,24 @@ class EventsController {
     }
   };
 
+  // -------------------------------------------------------------------------
+  // POST /api/events/:id/delete  (hard delete)
+  // -------------------------------------------------------------------------
+  deleteEvent = async (req: Request, res: Response): Promise<void> => {
+    try {
+      const { id } = req.params as Record<string, string>;
+      const deleted = await eventsService.deleteEvent(id);
+      if (!deleted) {
+        res.status(404).json({ success: false, message: 'Veranstaltung nicht gefunden' });
+        return;
+      }
+      res.json({ success: true, message: 'Veranstaltung wurde gelöscht' });
+    } catch (error) {
+      logger.error('deleteEvent error', { error });
+      res.status(500).json({ success: false, message: 'Fehler beim Löschen der Veranstaltung' });
+    }
+  };
+
   // -------------------------------------------------------------------------
   // GET /api/events/calendar-token
   // -------------------------------------------------------------------------

backend/src/routes/atemschutz.routes.ts

@@ -3,8 +3,8 @@ import atemschutzController from '../controllers/atemschutz.controller';
 import { authenticate } from '../middleware/auth.middleware';
 import { requireGroups } from '../middleware/rbac.middleware';
 
-const ADMIN_GROUPS = ['dashboard_admin'];
-const WRITE_GROUPS = ['dashboard_admin', 'dashboard_atemschutz'];
+const ADMIN_GROUPS = ['dashboard_admin', 'dashboard_kommando', 'dashboard_atemschutz', 'dashboard_moderator'];
+const WRITE_GROUPS = ['dashboard_admin', 'dashboard_kommando', 'dashboard_atemschutz', 'dashboard_moderator'];
 
 const router = Router();
 

backend/src/routes/events.routes.ts

@@ -143,4 +143,15 @@ router.delete(
   eventsController.cancelEvent.bind(eventsController)
 );
 
+/**
+ * POST /api/events/:id/delete
+ * Hard-delete an event permanently. Requires admin or moderator.
+ */
+router.post(
+  '/:id/delete',
+  authenticate,
+  requireGroups(WRITE_GROUPS),
+  eventsController.deleteEvent.bind(eventsController)
+);
+
 export default router;

backend/src/services/atemschutz.service.ts

@@ -8,19 +8,31 @@ import {
   UpdateAtemschutzData,
 } from '../models/atemschutz.model';
 
+const ATEMSCHUTZ_PRIVILEGED = ['dashboard_admin', 'dashboard_kommando', 'dashboard_atemschutz', 'dashboard_moderator'];
+
 class AtemschutzService {
   // =========================================================================
   // ÜBERSICHT (ALL RECORDS)
   // =========================================================================
 
-  async getAll(): Promise<AtemschutzUebersicht[]> {
+  async getAll(userGroups: string[], userId: string): Promise<AtemschutzUebersicht[]> {
+    const isPrivileged = userGroups.some(g => ATEMSCHUTZ_PRIVILEGED.includes(g));
     try {
-      const result = await pool.query(`
+      let result;
+      if (isPrivileged) {
+        result = await pool.query(`
           SELECT *
           FROM atemschutz_uebersicht
           WHERE mitglied_status IS NULL OR mitglied_status IN ('aktiv', 'anwärter')
           ORDER BY user_family_name, user_given_name
         `);
+      } else {
+        result = await pool.query(`
+          SELECT *
+          FROM atemschutz_uebersicht
+          WHERE user_id = $1
+        `, [userId]);
+      }
 
       return result.rows.map((row) => ({
         ...row,
@@ -208,7 +220,21 @@ class AtemschutzService {
   // DASHBOARD KPI / STATISTIKEN
   // =========================================================================
 
-  async getStats(): Promise<AtemschutzStats> {
+  async getStats(userGroups: string[], userId: string): Promise<AtemschutzStats> {
+    const isPrivileged = userGroups.some(g => ATEMSCHUTZ_PRIVILEGED.includes(g));
+    if (!isPrivileged) {
+      return {
+        total: 0,
+        mitLehrgang: 0,
+        untersuchungGueltig: 0,
+        untersuchungAbgelaufen: 0,
+        untersuchungBaldFaellig: 0,
+        leistungstestGueltig: 0,
+        leistungstestAbgelaufen: 0,
+        leistungstestBaldFaellig: 0,
+        einsatzbereit: 0,
+      };
+    }
     try {
       const result = await pool.query(`
         SELECT

backend/src/services/events.service.ts

@@ -490,6 +490,24 @@ class EventsService {
     }
   }
 
+  /**
+   * Hard-deletes an event (and any recurrence children) from the database.
+   * Returns true if the event was found and deleted, false if not found.
+   */
+  async deleteEvent(id: string): Promise<boolean> {
+    logger.info('Hard-deleting event', { id });
+    // Delete recurrence children first (wiederholung_parent_id references)
+    await pool.query(
+      `DELETE FROM veranstaltungen WHERE wiederholung_parent_id = $1`,
+      [id]
+    );
+    const result = await pool.query(
+      `DELETE FROM veranstaltungen WHERE id = $1`,
+      [id]
+    );
+    return (result.rowCount ?? 0) > 0;
+  }
+
   // -------------------------------------------------------------------------
   // ICAL TOKEN
   // -------------------------------------------------------------------------

frontend/src/pages/Atemschutz.tsx

@@ -152,7 +152,9 @@ const StatCard: React.FC<StatCardProps> = ({ label, value, color, bgcolor }) =>
 function Atemschutz() {
   const notification = useNotification();
   const { user } = useAuth();
-  const canWrite = user?.groups?.some(g => ['dashboard_admin', 'dashboard_atemschutz'].includes(g)) ?? false;
+  const ATEMSCHUTZ_PRIVILEGED = ['dashboard_admin', 'dashboard_kommando', 'dashboard_atemschutz', 'dashboard_moderator'];
+  const canViewAll = user?.groups?.some(g => ATEMSCHUTZ_PRIVILEGED.includes(g)) ?? false;
+  const canWrite = canViewAll;
 
   // Data state
   const [traeger, setTraeger] = useState<AtemschutzUebersicht[]>([]);
@@ -181,6 +183,7 @@ function Atemschutz() {
     try {
       setLoading(true);
       setError(null);
+      if (canViewAll) {
         const [traegerData, statsData, membersData] = await Promise.all([
           atemschutzApi.getAll(),
           atemschutzApi.getStats(),
@@ -189,12 +192,16 @@ function Atemschutz() {
         setTraeger(traegerData);
         setStats(statsData);
         setMembers(membersData.items);
+      } else {
+        const traegerData = await atemschutzApi.getAll();
+        setTraeger(traegerData);
+      }
     } catch {
       setError('Atemschutzdaten konnten nicht geladen werden. Bitte versuchen Sie es erneut.');
     } finally {
       setLoading(false);
     }
-  }, []);
+  }, [canViewAll]);
 
   useEffect(() => {
     fetchData();
@@ -359,7 +366,12 @@ function Atemschutz() {
             <Typography variant="h4" gutterBottom sx={{ mb: 0 }}>
               Atemschutzverwaltung
             </Typography>
-            {!loading && stats && (
+            {!loading && !canViewAll && (
+              <Typography variant="body2" color="text.secondary" sx={{ mt: 0.5 }}>
+                Dein persönlicher Atemschutz-Status
+              </Typography>
+            )}
+            {!loading && stats && canViewAll && (
               <Box sx={{ display: 'flex', flexWrap: 'wrap', gap: 1, mt: 0.5 }}>
                 <Typography variant="body2" color="text.secondary">
                   {stats.total} Gesamt
@@ -382,7 +394,7 @@ function Atemschutz() {
         </Box>
 
         {/* Stats cards */}
-        {!loading && stats && (
+        {!loading && stats && canViewAll && (
           <Grid container spacing={2} sx={{ mb: 3 }}>
             <Grid item xs={6} sm={3}>
               <StatCard
@@ -405,6 +417,7 @@ function Atemschutz() {
         )}
 
         {/* Search bar */}
+        {canViewAll && (
         <Box sx={{ mb: 3 }}>
           <TextField
             placeholder="Suchen (Name, E-Mail, Dienstgrad...)"
@@ -421,6 +434,7 @@ function Atemschutz() {
             }}
           />
         </Box>
+        )}
 
         {/* Loading state */}
         {loading && (
@@ -467,7 +481,7 @@ function Atemschutz() {
                   <TableCell>Untersuchung gültig bis</TableCell>
                   <TableCell>Leistungstest gültig bis</TableCell>
                   <TableCell align="center">Status</TableCell>
-                  <TableCell align="right">Aktionen</TableCell>
+                  {canWrite && <TableCell align="right">Aktionen</TableCell>}
                 </TableRow>
               </TableHead>
               <TableBody>
@@ -545,8 +559,8 @@ function Atemschutz() {
                           variant="filled"
                         />
                       </TableCell>
-                      <TableCell align="right">
                       {canWrite && (
+                        <TableCell align="right">
                           <Tooltip title="Bearbeiten">
                             <Button
                               size="small"
@@ -556,8 +570,6 @@ function Atemschutz() {
                               <Edit fontSize="small" />
                             </Button>
                           </Tooltip>
-                        )}
-                        {canWrite && (
                           <Tooltip title="Löschen">
                             <Button
                               size="small"
@@ -568,8 +580,8 @@ function Atemschutz() {
                               <Delete fontSize="small" />
                             </Button>
                           </Tooltip>
-                        )}
                         </TableCell>
+                      )}
                     </TableRow>
                   );
                 })}

frontend/src/pages/Dashboard.tsx

@@ -33,12 +33,7 @@ function Dashboard() {
         <Box
           sx={{
             display: 'grid',
-            gridTemplateColumns: {
-              xs: '1fr',
-              sm: 'repeat(2, 1fr)',
-              lg: 'repeat(3, 1fr)',
-              xl: 'repeat(4, 1fr)',
-            },
+            gridTemplateColumns: 'repeat(auto-fill, minmax(280px, 1fr))',
             gap: 2.5,
             alignItems: 'start',
           }}

frontend/src/pages/Kalender.tsx

@@ -51,6 +51,7 @@ import {
   ChevronLeft,
   ChevronRight,
   ContentCopy as CopyIcon,
+  DeleteForever as DeleteForeverIcon,
   DirectionsCar as CarIcon,
   Edit as EditIcon,
   Event as EventIcon,
@@ -453,11 +454,12 @@ interface DayPopoverProps {
   onClose: () => void;
   onTrainingClick: (id: string) => void;
   onEventEdit: (ev: VeranstaltungListItem) => void;
+  onEventDelete: (id: string) => void;
 }
 
 function DayPopover({
   anchorEl, day, trainingForDay, eventsForDay,
-  canWriteEvents, onClose, onTrainingClick, onEventEdit,
+  canWriteEvents, onClose, onTrainingClick, onEventEdit, onEventDelete,
 }: DayPopoverProps) {
   if (!day) return null;
   const hasContent = trainingForDay.length > 0 || eventsForDay.length > 0;
@@ -589,6 +591,15 @@ function DayPopover({
                     <EditIcon fontSize="small" />
                   </IconButton>
                 )}
+                {canWriteEvents && (
+                  <IconButton
+                    size="small"
+                    color="error"
+                    onClick={() => { onEventDelete(ev.id); onClose(); }}
+                  >
+                    <DeleteForeverIcon fontSize="small" />
+                  </IconButton>
+                )}
               </ListItem>
             ))}
           </List>
@@ -610,11 +621,12 @@ interface CombinedListViewProps {
   onTrainingClick: (id: string) => void;
   onEventEdit: (ev: VeranstaltungListItem) => void;
   onEventCancel: (id: string) => void;
+  onEventDelete: (id: string) => void;
 }
 
 function CombinedListView({
   trainingEvents, veranstaltungen, selectedKategorie,
-  canWriteEvents, onTrainingClick, onEventEdit, onEventCancel,
+  canWriteEvents, onTrainingClick, onEventEdit, onEventCancel, onEventDelete,
 }: CombinedListViewProps) {
   type ListEntry =
     | { kind: 'training'; item: UebungListItem }
@@ -742,6 +754,18 @@ function CombinedListView({
                   </IconButton>
                 </Box>
               )}
+              {!isTraining && canWriteEvents && (
+                <Box sx={{ display: 'flex', gap: 0.5, ml: item.abgesagt ? 1 : 0 }}>
+                  <IconButton
+                    size="small"
+                    color="error"
+                    onClick={() => onEventDelete(item.id)}
+                    title="Endgültig löschen"
+                  >
+                    <DeleteForeverIcon fontSize="small" />
+                  </IconButton>
+                </Box>
+              )}
             </ListItem>
           </Box>
         );
@@ -1141,6 +1165,8 @@ export default function Kalender() {
   const [cancelEventId, setCancelEventId] = useState<string | null>(null);
   const [cancelEventGrund, setCancelEventGrund] = useState('');
   const [cancelEventLoading, setCancelEventLoading] = useState(false);
+  const [deleteEventId, setDeleteEventId] = useState<string | null>(null);
+  const [deleteEventLoading, setDeleteEventLoading] = useState(false);
 
   // ── Bookings tab state ───────────────────────────────────────────────────────
   const [currentWeekStart, setCurrentWeekStart] = useState<Date>(() =>
@@ -1326,6 +1352,21 @@ export default function Kalender() {
     }
   };
 
+  const handleDeleteEvent = async () => {
+    if (!deleteEventId) return;
+    setDeleteEventLoading(true);
+    try {
+      await eventsApi.deleteEvent(deleteEventId);
+      notification.showSuccess('Veranstaltung wurde endgültig gelöscht');
+      setDeleteEventId(null);
+      loadCalendarData();
+    } catch (e: unknown) {
+      notification.showError((e as any)?.message || 'Fehler beim Löschen');
+    } finally {
+      setDeleteEventLoading(false);
+    }
+  };
+
   // ── Booking helpers ──────────────────────────────────────────────────────────
 
   const getBookingsForCell = (vehicleId: string, day: Date): FahrzeugBuchungListItem[] =>
@@ -1642,6 +1683,7 @@ export default function Kalender() {
                     setCancelEventId(id);
                     setCancelEventGrund('');
                   }}
+                  onEventDelete={(id) => setDeleteEventId(id)}
                 />
               </Paper>
             )}
@@ -1673,6 +1715,7 @@ export default function Kalender() {
                 setVeranstEditing(ev);
                 setVeranstFormOpen(true);
               }}
+              onEventDelete={(id) => setDeleteEventId(id)}
             />
 
             {/* Veranstaltung Form Dialog */}
@@ -1720,6 +1763,34 @@ export default function Kalender() {
               </DialogActions>
             </Dialog>
 
+            {/* Endgültig löschen Dialog */}
+            <Dialog
+              open={Boolean(deleteEventId)}
+              onClose={() => setDeleteEventId(null)}
+              maxWidth="xs"
+              fullWidth
+            >
+              <DialogTitle>Veranstaltung endgültig löschen?</DialogTitle>
+              <DialogContent>
+                <DialogContentText>
+                  Diese Veranstaltung wird endgültig gelöscht. Diese Aktion kann nicht rückgängig gemacht werden.
+                </DialogContentText>
+              </DialogContent>
+              <DialogActions>
+                <Button onClick={() => setDeleteEventId(null)} disabled={deleteEventLoading}>
+                  Abbrechen
+                </Button>
+                <Button
+                  variant="contained"
+                  color="error"
+                  onClick={handleDeleteEvent}
+                  disabled={deleteEventLoading}
+                >
+                  {deleteEventLoading ? <CircularProgress size={20} /> : 'Endgültig löschen'}
+                </Button>
+              </DialogActions>
+            </Dialog>
+
             {/* iCal Event subscription dialog */}
             <Dialog open={icalEventOpen} onClose={() => setIcalEventOpen(false)} maxWidth="sm" fullWidth>
               <DialogTitle>Kalender abonnieren</DialogTitle>

frontend/src/pages/Profile.tsx

@@ -41,6 +41,8 @@ function Profile() {
     });
   };
 
+  const dashboardGroups = (user.groups ?? []).filter((g) => g.startsWith('dashboard_'));
+
   return (
     <DashboardLayout>
       <Container maxWidth="lg">
@@ -93,7 +95,7 @@ function Profile() {
                 <Divider sx={{ my: 2 }} />
 
                 {/* Groups/Roles */}
-                {user.groups && user.groups.length > 0 && (
+                {dashboardGroups.length > 0 && (
                   <Box sx={{ mt: 2 }}>
                     <Typography
                       variant="subtitle2"
@@ -105,9 +107,11 @@ function Profile() {
                       Gruppen
                     </Typography>
                     <Box sx={{ display: 'flex', flexWrap: 'wrap', gap: 1, mt: 1 }}>
-                      {user.groups.map((group) => (
-                        <Chip key={group} label={group} size="small" color="primary" />
-                      ))}
+                      {dashboardGroups.map((group) => {
+                        const name = group.replace(/^dashboard_/, '');
+                        const label = name.charAt(0).toUpperCase() + name.slice(1);
+                        return <Chip key={group} label={label} size="small" color="primary" />;
+                      })}
                     </Box>
                   </Box>
                 )}

frontend/src/pages/Veranstaltungen.tsx

@@ -49,6 +49,7 @@ import {
   Today as TodayIcon,
   IosShare,
   Event as EventIcon,
+  Delete as DeleteIcon,
 } from '@mui/icons-material';
 import DashboardLayout from '../components/dashboard/DashboardLayout';
 import { useAuth } from '../contexts/AuthContext';
@@ -851,9 +852,10 @@ interface ListViewProps {
   canWrite: boolean;
   onEdit: (ev: VeranstaltungListItem) => void;
   onCancel: (id: string) => void;
+  onDelete: (id: string) => void;
 }
 
-function EventListView({ events, canWrite, onEdit, onCancel }: ListViewProps) {
+function EventListView({ events, canWrite, onEdit, onCancel, onDelete }: ListViewProps) {
   if (events.length === 0) {
     return (
       <Alert severity="info" sx={{ mt: 2 }}>
@@ -945,9 +947,16 @@ function EventListView({ events, canWrite, onEdit, onCancel }: ListViewProps) {
                 <IconButton size="small" onClick={() => onEdit(ev)}>
                   <EditIcon fontSize="small" />
                 </IconButton>
+                <Tooltip title="Stornieren">
                   <IconButton size="small" color="error" onClick={() => onCancel(ev.id)}>
                     <CancelIcon fontSize="small" />
                   </IconButton>
+                </Tooltip>
+                <Tooltip title="Löschen">
+                  <IconButton size="small" color="error" onClick={() => onDelete(ev.id)}>
+                    <DeleteIcon fontSize="small" />
+                  </IconButton>
+                </Tooltip>
               </Box>
             )}
           </ListItem>
@@ -996,6 +1005,10 @@ export default function Veranstaltungen() {
   const [cancelGrund, setCancelGrund] = useState('');
   const [cancelLoading, setCancelLoading] = useState(false);
 
+  // Delete dialog
+  const [deleteId, setDeleteId] = useState<string | null>(null);
+  const [deleteLoading, setDeleteLoading] = useState(false);
+
   // iCal dialog
   const [icalOpen, setIcalOpen] = useState(false);
 
@@ -1100,6 +1113,22 @@ export default function Veranstaltungen() {
     }
   };
 
+  const handleDeleteEvent = async () => {
+    if (!deleteId) return;
+    setDeleteLoading(true);
+    try {
+      await eventsApi.deleteEvent(deleteId);
+      setDeleteId(null);
+      loadData();
+      notification.showSuccess('Veranstaltung wurde gelöscht');
+    } catch (e: unknown) {
+      const msg = e instanceof Error ? e.message : 'Fehler beim Löschen';
+      notification.showError(msg);
+    } finally {
+      setDeleteLoading(false);
+    }
+  };
+
   // ---------------------------------------------------------------------------
   // Filtered events for list view
   // ---------------------------------------------------------------------------
@@ -1246,6 +1275,7 @@ export default function Veranstaltungen() {
               canWrite={canWrite}
               onEdit={(ev) => { setEditingEvent(ev); setFormOpen(true); }}
               onCancel={(id) => { setCancelId(id); setCancelGrund(''); }}
+              onDelete={(id) => setDeleteId(id)}
             />
           </Paper>
         )}
@@ -1289,16 +1319,16 @@ export default function Veranstaltungen() {
           maxWidth="xs"
           fullWidth
         >
-          <DialogTitle>Veranstaltung absagen</DialogTitle>
+          <DialogTitle>Veranstaltung stornieren</DialogTitle>
           <DialogContent>
             <DialogContentText sx={{ mb: 2 }}>
-              Bitte gib einen Grund für die Absage an (mind. 5 Zeichen).
+              Bitte gib einen Grund für die Stornierung an (mind. 5 Zeichen).
             </DialogContentText>
             <TextField
               fullWidth
               multiline
               rows={3}
-              label="Absagegrund"
+              label="Stornierungsgrund"
               value={cancelGrund}
               onChange={(e) => setCancelGrund(e.target.value)}
               autoFocus
@@ -1312,7 +1342,23 @@ export default function Veranstaltungen() {
               onClick={handleCancelEvent}
               disabled={cancelGrund.trim().length < 5 || cancelLoading}
             >
-              {cancelLoading ? <CircularProgress size={20} /> : 'Absagen'}
+              {cancelLoading ? <CircularProgress size={20} /> : 'Stornieren'}
+            </Button>
+          </DialogActions>
+        </Dialog>
+
+        {/* Delete Dialog */}
+        <Dialog open={Boolean(deleteId)} onClose={() => setDeleteId(null)} maxWidth="xs" fullWidth>
+          <DialogTitle>Veranstaltung endgültig löschen</DialogTitle>
+          <DialogContent>
+            <DialogContentText>
+              Soll diese Veranstaltung wirklich endgültig gelöscht werden? Diese Aktion kann nicht rückgängig gemacht werden.
+            </DialogContentText>
+          </DialogContent>
+          <DialogActions>
+            <Button onClick={() => setDeleteId(null)}>Abbrechen</Button>
+            <Button variant="contained" color="error" onClick={handleDeleteEvent} disabled={deleteLoading}>
+              {deleteLoading ? <CircularProgress size={20} /> : 'Endgültig löschen'}
             </Button>
           </DialogActions>
         </Dialog>

frontend/src/services/events.ts

@@ -129,6 +129,11 @@ export const eventsApi = {
       .then(() => undefined);
   },
 
+  /** Hard-delete an event permanently */
+  deleteEvent(id: string): Promise<void> {
+    return api.post(`/api/events/${id}/delete`).then(() => undefined);
+  },
+
   // -------------------------------------------------------------------------
   // iCal
   // -------------------------------------------------------------------------