feat(admin): grant full admin permissions in app and security rules to nicolas@gruber.info

firestore.rules

@@ -8,7 +8,10 @@ service cloud.firestore {
     }
 
     function isAdmin() {
-      return request.auth != null && request.auth.token.admin == true;
+      return request.auth != null && (
+        request.auth.token.admin == true ||
+        request.auth.token.email == 'nicolas@gruber.info'
+      );
     }
 
     function isAuthorOrAdmin() {

lib/screens/info_screen.dart

@@ -51,7 +51,9 @@ class InfoScreen extends StatelessWidget {
           const SizedBox(height: 8),
           // Bürgerforum Access & Account Card
           Card(
-            color: auth.isRegisteredUser
+            color: auth.isAdmin
+                ? Colors.indigo.shade50
+                : auth.isRegisteredUser
                     ? Colors.green.shade50
                     : auth.isCommunityUnlocked
                         ? Colors.teal.shade50
@@ -65,12 +67,16 @@ class InfoScreen extends StatelessWidget {
                   Row(
                     children: [
                       Icon(
-                        auth.isRegisteredUser
+                        auth.isAdmin
+                            ? Icons.admin_panel_settings
+                            : auth.isRegisteredUser
                                 ? Icons.account_circle
                                 : auth.isCommunityUnlocked
                                     ? Icons.verified_user
                                     : Icons.lock_outline,
-                        color: auth.isRegisteredUser
+                        color: auth.isAdmin
+                            ? Colors.indigo.shade700
+                            : auth.isRegisteredUser
                                 ? Colors.green.shade700
                                 : auth.isCommunityUnlocked
                                     ? Colors.teal.shade800
@@ -83,7 +89,9 @@ class InfoScreen extends StatelessWidget {
                           crossAxisAlignment: CrossAxisAlignment.start,
                           children: [
                             Text(
-                              auth.isRegisteredUser
+                              auth.isAdmin
+                                  ? 'Administrator'
+                                  : auth.isRegisteredUser
                                       ? (auth.displayName?.isNotEmpty == true
                                           ? auth.displayName!
                                           : 'Bürger-Konto')
@@ -95,7 +103,9 @@ class InfoScreen extends StatelessWidget {
                             ),
                             const SizedBox(height: 2),
                             Text(
-                              auth.isRegisteredUser
+                              auth.isAdmin
+                                  ? '${auth.email ?? "Angemeldet"} (Admin-Rechte aktiv)'
+                                  : auth.isRegisteredUser
                                       ? auth.email ?? 'Angemeldet'
                                       : auth.isCommunityUnlocked
                                           ? 'Mängel & Ideen freigeschaltet'

lib/services/auth_service.dart

@@ -47,8 +47,17 @@ class AuthService extends ChangeNotifier {
     _initAuth();
   }
 
+  static const List<String> adminEmails = [
+    'nicolas@gruber.info',
+  ];
+
   Future<void> _checkAdminClaim(User? user) async {
     if (user != null && !user.isAnonymous) {
+      final email = user.email?.trim().toLowerCase();
+      if (email != null && adminEmails.contains(email)) {
+        _isAdmin = true;
+        return;
+      }
       try {
         final tokenResult = await user.getIdTokenResult();
         _isAdmin = tokenResult.claims?['admin'] == true;

storage.rules

@@ -15,7 +15,8 @@ service firebase.storage {
       // Nur der Verfasser oder ein Admin darf sein Foto löschen
       allow delete: if request.auth != null && (
         request.auth.uid == userId ||
-        request.auth.token.admin == true
+        request.auth.token.admin == true ||
+        request.auth.token.email == 'nicolas@gruber.info'
       );
     }
   }