gdpr audit implemented, email log, vollmachten, pdf delete cancel data privacy and vollmachten, removed message no id card in engergy car, and other contracts that are not telecom contracts, added insert counter for engery

backend/src/services/user.service.ts

@@ -47,6 +47,9 @@ export async function getAllUsers(filters: UserFilters) {
         lastName: true,
         isActive: true,
         customerId: true,
+        whatsappNumber: true,
+        telegramUsername: true,
+        signalNumber: true,
         createdAt: true,
         roles: {
           include: {
@@ -62,21 +65,25 @@ export async function getAllUsers(filters: UserFilters) {
     prisma.user.count({ where }),
   ]);
 
-  // Get Developer role ID
-  const developerRole = await prisma.role.findFirst({
-    where: { name: 'Developer' },
-  });
+  // Get hidden role IDs
+  const [developerRole, gdprRole] = await Promise.all([
+    prisma.role.findFirst({ where: { name: 'Developer' } }),
+    prisma.role.findFirst({ where: { name: 'DSGVO' } }),
+  ]);
 
   return {
     users: users.map((u) => {
-      // Check if user has developer role assigned
       const hasDeveloperAccess = developerRole
         ? u.roles.some((ur) => ur.roleId === developerRole.id)
         : false;
+      const hasGdprAccess = gdprRole
+        ? u.roles.some((ur) => ur.roleId === gdprRole.id)
+        : false;
       return {
         ...u,
         roles: u.roles.map((r) => r.role),
         hasDeveloperAccess,
+        hasGdprAccess,
       };
     }),
     pagination: buildPaginationResponse(page, limit, total),
@@ -93,6 +100,9 @@ export async function getUserById(id: number) {
       lastName: true,
       isActive: true,
       customerId: true,
+      whatsappNumber: true,
+      telegramUsername: true,
+      signalNumber: true,
       createdAt: true,
       updatedAt: true,
       roles: {
@@ -135,6 +145,10 @@ export async function createUser(data: {
   roleIds: number[];
   customerId?: number;
   hasDeveloperAccess?: boolean;
+  hasGdprAccess?: boolean;
+  whatsappNumber?: string;
+  telegramUsername?: string;
+  signalNumber?: string;
 }) {
   const hashedPassword = await bcrypt.hash(data.password, 10);
 
@@ -145,6 +159,9 @@ export async function createUser(data: {
       firstName: data.firstName,
       lastName: data.lastName,
       customerId: data.customerId,
+      whatsappNumber: data.whatsappNumber || null,
+      telegramUsername: data.telegramUsername || null,
+      signalNumber: data.signalNumber || null,
       roles: {
         create: data.roleIds.map((roleId) => ({ roleId })),
       },
@@ -167,6 +184,11 @@ export async function createUser(data: {
     await setUserDeveloperAccess(user.id, true);
   }
 
+  // DSGVO-Zugriff setzen falls aktiviert
+  if (data.hasGdprAccess) {
+    await setUserGdprAccess(user.id, true);
+  }
+
   return user;
 }
 
@@ -181,9 +203,13 @@ export async function updateUser(
     roleIds?: number[];
     customerId?: number;
     hasDeveloperAccess?: boolean;
+    hasGdprAccess?: boolean;
+    whatsappNumber?: string;
+    telegramUsername?: string;
+    signalNumber?: string;
   }
 ) {
-  const { roleIds, password, hasDeveloperAccess, ...userData } = data;
+  const { roleIds, password, hasDeveloperAccess, hasGdprAccess, ...userData } = data;
 
   // Check if this would remove the last admin
   const isBeingDeactivated = userData.isActive === false;
@@ -311,18 +337,20 @@ export async function updateUser(
   }
 
   // Handle developer access
-  console.log('updateUser - hasDeveloperAccess:', hasDeveloperAccess);
   if (hasDeveloperAccess !== undefined) {
     await setUserDeveloperAccess(id, hasDeveloperAccess);
   }
 
+  // Handle GDPR access
+  if (hasGdprAccess !== undefined) {
+    await setUserGdprAccess(id, hasGdprAccess);
+  }
+
   return getUserById(id);
 }
 
 // Helper to set developer access for a user
 async function setUserDeveloperAccess(userId: number, enabled: boolean) {
-  console.log('setUserDeveloperAccess called - userId:', userId, 'enabled:', enabled);
-
   // Get or create developer:access permission
   let developerPerm = await prisma.permission.findFirst({
     where: { resource: 'developer', action: 'access' },
@@ -356,11 +384,7 @@ async function setUserDeveloperAccess(userId: number, enabled: boolean) {
     where: { userId, roleId: developerRole.id },
   });
 
-  console.log('setUserDeveloperAccess - developerRole.id:', developerRole.id, 'hasRole:', hasRole);
-
   if (enabled && !hasRole) {
-    // Add Developer role
-    console.log('Adding Developer role');
     await prisma.userRole.create({
       data: { userId, roleId: developerRole.id },
     });
@@ -370,8 +394,6 @@ async function setUserDeveloperAccess(userId: number, enabled: boolean) {
       data: { tokenInvalidatedAt: new Date() },
     });
   } else if (!enabled && hasRole) {
-    // Remove Developer role
-    console.log('Removing Developer role');
     await prisma.userRole.delete({
       where: { userId_roleId: { userId, roleId: developerRole.id } },
     });
@@ -380,8 +402,56 @@ async function setUserDeveloperAccess(userId: number, enabled: boolean) {
       where: { id: userId },
       data: { tokenInvalidatedAt: new Date() },
     });
-  } else {
-    console.log('No action needed - enabled:', enabled, 'hasRole:', !!hasRole);
+  }
+}
+
+// Helper to set GDPR access for a user
+async function setUserGdprAccess(userId: number, enabled: boolean) {
+  // Get or create DSGVO role
+  let gdprRole = await prisma.role.findFirst({
+    where: { name: 'DSGVO' },
+  });
+
+  if (!gdprRole) {
+    // Create DSGVO role with all audit:* and gdpr:* permissions
+    const gdprPermissions = await prisma.permission.findMany({
+      where: {
+        OR: [{ resource: 'audit' }, { resource: 'gdpr' }],
+      },
+    });
+
+    gdprRole = await prisma.role.create({
+      data: {
+        name: 'DSGVO',
+        description: 'DSGVO-Zugriff: Audit-Logs und Datenschutz-Verwaltung',
+        permissions: {
+          create: gdprPermissions.map((p) => ({ permissionId: p.id })),
+        },
+      },
+    });
+  }
+
+  // Check if user already has DSGVO role
+  const hasRole = await prisma.userRole.findFirst({
+    where: { userId, roleId: gdprRole.id },
+  });
+
+  if (enabled && !hasRole) {
+    await prisma.userRole.create({
+      data: { userId, roleId: gdprRole.id },
+    });
+    await prisma.user.update({
+      where: { id: userId },
+      data: { tokenInvalidatedAt: new Date() },
+    });
+  } else if (!enabled && hasRole) {
+    await prisma.userRole.delete({
+      where: { userId_roleId: { userId, roleId: gdprRole.id } },
+    });
+    await prisma.user.update({
+      where: { id: userId },
+      data: { tokenInvalidatedAt: new Date() },
+    });
   }
 }