Update dependencies to include TinyMCE and Quill, enhance Navigation component with a new Newsletter submenu, and implement role-based access control for CMS features. Refactor user role handling to support multiple roles and improve user management functionality across various API endpoints.

server/api/newsletter/groups/public-list.get.js

@@ -0,0 +1,73 @@
+import fs from 'fs/promises'
+import path from 'path'
+import { getUserFromToken } from '../../../utils/auth.js'
+
+const getDataPath = (filename) => {
+  const cwd = process.cwd()
+  if (cwd.endsWith('.output')) {
+    return path.join(cwd, '../server/data', filename)
+  }
+  return path.join(cwd, 'server/data', filename)
+}
+
+const NEWSLETTER_GROUPS_FILE = getDataPath('newsletter-groups.json')
+
+async function readGroups() {
+  try {
+    const data = await fs.readFile(NEWSLETTER_GROUPS_FILE, 'utf-8')
+    return JSON.parse(data)
+  } catch (error) {
+    if (error.code === 'ENOENT') {
+      return []
+    }
+    throw error
+  }
+}
+
+export default defineEventHandler(async (event) => {
+  try {
+    // Prüfe ob Benutzer eingeloggt ist
+    let isLoggedIn = false
+    try {
+      const token = getCookie(event, 'auth_token') || getHeader(event, 'authorization')?.replace('Bearer ', '')
+      if (token) {
+        const user = await getUserFromToken(token)
+        if (user && user.active) {
+          isLoggedIn = true
+        }
+      }
+    } catch (e) {
+      // Nicht eingeloggt - kein Problem
+    }
+
+    const groups = await readGroups()
+    
+    // Filtere Newsletter-Gruppen basierend auf Login-Status
+    let publicGroups
+    if (isLoggedIn) {
+      // Eingeloggte Benutzer sehen alle Abonnenten-Newsletter (intern und extern)
+      publicGroups = groups.filter(g => g.type === 'subscription')
+    } else {
+      // Nicht eingeloggte Benutzer sehen nur externe Newsletter
+      publicGroups = groups.filter(g => 
+        g.type === 'subscription' && g.sendToExternal === true
+      )
+    }
+    
+    return {
+      success: true,
+      groups: publicGroups.map(g => ({
+        id: g.id,
+        name: g.name,
+        description: g.description || ''
+      }))
+    }
+  } catch (error) {
+    console.error('Fehler beim Laden der öffentlichen Newsletter-Gruppen:', error)
+    throw createError({
+      statusCode: 500,
+      statusMessage: 'Fehler beim Laden der Newsletter-Gruppen'
+    })
+  }
+})
+