Datenschutz vollmacht fixed, two time counter added

backend/src/routes/contract.routes.ts

@@ -20,6 +20,10 @@ router.post('/:id/follow-up', authenticate, requirePermission('contracts:create'
 // Snooze (Vertrag zurückstellen)
 router.patch('/:id/snooze', authenticate, requirePermission('contracts:update'), contractController.snoozeContract);
 
+// Folgezähler
+router.post('/:id/successor-meter', authenticate, requirePermission('contracts:update'), contractController.addSuccessorMeter);
+router.delete('/:id/contract-meter/:contractMeterId', authenticate, requirePermission('contracts:update'), contractController.removeContractMeter);
+
 // Get decrypted password
 router.get('/:id/password', authenticate, requirePermission('contracts:read'), contractController.getContractPassword);
 

backend/src/routes/upload.routes.ts

@@ -440,6 +440,16 @@ router.post(
         data: { privacyPolicyPath: relativePath },
       });
 
+      // Alle Consents auf GRANTED setzen (PDF = vollständige Einwilligung)
+      const consentTypes = ['DATA_PROCESSING', 'MARKETING_EMAIL', 'MARKETING_PHONE', 'DATA_SHARING_PARTNER'] as const;
+      for (const consentType of consentTypes) {
+        await prisma.customerConsent.upsert({
+          where: { customerId_consentType: { customerId, consentType } },
+          update: { status: 'GRANTED', grantedAt: new Date(), source: 'papier' },
+          create: { customerId, consentType, status: 'GRANTED', grantedAt: new Date(), source: 'papier', createdBy: (req as any).user?.email || 'admin' },
+        });
+      }
+
       res.json({
         success: true,
         data: {
@@ -488,6 +498,12 @@ router.delete(
         data: { privacyPolicyPath: null },
       });
 
+      // Nur Consents widerrufen die per Papier erteilt wurden
+      await prisma.customerConsent.updateMany({
+        where: { customerId, status: 'GRANTED', source: 'papier' },
+        data: { status: 'WITHDRAWN', withdrawnAt: new Date() },
+      });
+
       res.json({ success: true });
     } catch (error) {
       console.error('Delete error:', error);