feat: Add Admin Groups Management Module

- Introduced a new module for managing user groups (`usrgrp`) in the administration interface.
- Implemented CRUD operations for user groups: list, create, rename, and delete.
- Added authorization checks to ensure only users with appropriate permissions can manage groups.
- Created corresponding frontend JavaScript and SCSS files for the new module.
- Updated documentation to reflect the new group management functionality and its authorization model.
- Added SQL stored procedures for group management operations.
- Established a new login script for database access, ensuring proper security practices.

Fuchs/wwwroot/web/fis.usr.de.js

@@ -3,6 +3,7 @@ let $uct = {
     , rel: 'Neu Laden'
     , col_name: 'Name'
     , col_email: 'E-Mail'
+    , col_groups: 'Gruppen'
     , col_status: 'Status'
     , active: 'Aktiv'
     , disabled: 'Deaktiviert'
@@ -75,6 +76,40 @@ let $usr = {
         let f = (firstname || '').trim().charAt(0), n = (name || '').trim().charAt(0);
         return (f + n).toUpperCase() || '?';
     },
+    /* Builds one (detached) grid row for a user record; shared by renderLst and refreshRow. */
+    buildRow: function (rw) {
+        let disabled = bool(rw.disabled, false) === true;
+        let row = $$.dc('usr_row', { id: 'usr' + rw.useraccount_id });
+        $$.dc('usr_avatar', row).text($usr.initials(rw.firstname, rw.name));
+        $$.dc('usr_col_name', row).text(`${rw.firstname || ''} ${rw.name || ''}`.trim());
+        $$.dc('usr_col_email', row).text(rw.email || '');
+        $$.dc('usr_col_groups', row).text(rw.groups || '').attr('title', rw.groups || '');
+        $$.dc('usr_col_status', row).append(
+            $$.dc(disabled ? 'usr_pill usr_pill_off' : 'usr_pill usr_pill_on').text(disabled ? $uct.disabled : $uct.active)
+        );
+        row.click(function () {
+            row.toggleClass('selected').siblings().rC('selected');
+            if (row.is('.selected') === true) { $usr.iMn(rw); } else { $usr.eM(true); }
+        });
+        return row;
+    },
+    /* Re-fetches a single user and swaps its grid row in place, keeping selection + ribbon
+       (used after changes that only affect that one row: email, group membership). Falls back
+       to a full reload when the row is no longer in the grid. */
+    refreshRow: function (rw) {
+        let old = $('#usr' + rw.useraccount_id);
+        if (old.length === 0) { $usr.renderLst(); return; }
+        $ocms.postXT({
+            url: $ocms.url('usr/list'), data: { useraccount_id: rw.useraccount_id }, success: function (r) {
+                let fresh = (r.users || [])[0];
+                if (!fresh) { $usr.renderLst(); return; }
+                let selected = old.is('.selected');
+                let row = $usr.buildRow(fresh).toggleClass('selected', selected);
+                old.replaceWith(row);
+                if (selected) { $usr.iMn(fresh); }
+            }, error: function () { $usr.renderLst(); }
+        });
+    },
     renderLst: function () {
         let usrlst = $fis.frm_list(true, true).ldng(1), usrfrm = $$.dc('usrfrm', usrlst);
         $usr.eM(true);
@@ -86,25 +121,13 @@ let $usr = {
                 $$.dc('usr_col_avatar', hdr);
                 $$.dc('usr_col_name', hdr).text($uct.col_name);
                 $$.dc('usr_col_email', hdr).text($uct.col_email);
+                $$.dc('usr_col_groups', hdr).text($uct.col_groups);
                 $$.dc('usr_col_status', hdr).text($uct.col_status);
                 if ((r.users || []).length === 0) {
                     $$.dc('usr_empty', grid).text($uct.empty);
                     return;
                 }
-                $.each(r.users || [], function (ri, rw) {
-                    let disabled = bool(rw.disabled, false) === true;
-                    let row = $$.dc('usr_row', grid, { id: 'usr' + rw.useraccount_id });
-                    $$.dc('usr_avatar', row).text($usr.initials(rw.firstname, rw.name));
-                    $$.dc('usr_col_name', row).text(`${rw.firstname || ''} ${rw.name || ''}`.trim());
-                    $$.dc('usr_col_email', row).text(rw.email || '');
-                    $$.dc('usr_col_status', row).append(
-                        $$.dc(disabled ? 'usr_pill usr_pill_off' : 'usr_pill usr_pill_on').text(disabled ? $uct.disabled : $uct.active)
-                    );
-                    row.click(function () {
-                        row.toggleClass('selected').siblings().rC('selected');
-                        if (row.is('.selected') === true) { $usr.iMn(rw); } else { $usr.eM(true); }
-                    });
-                });
+                $.each(r.users || [], function (ri, rw) { grid.append($usr.buildRow(rw)); });
             }, error: function () {
                 usrfrm.empty();
                 $$.dc('usr_err', usrfrm).text($uct.loadfail);
@@ -187,7 +210,7 @@ let $usr = {
                     }, error: function (jqXHR) {
                         let code = ((jqXHR || {}).responseJSON || {}).error;
                         alert($uct.err[code] || $uct.err_generic);
-                    }, complete: function () { c.ldng(0); $usr.renderLst(); }
+                    }, complete: function () { c.ldng(0); $usr.refreshRow(rw); }
                 });
             }
         });
@@ -206,6 +229,7 @@ let $usr = {
                         $ocms.postXT({
                             url: $ocms.url('usr/groupset'),
                             data: { useraccount_id: rw.useraccount_id, usergroup_id: g.usergroup_id, member: checked },
+                            success: function () { $usr.refreshRow(rw); },   /* keep the groups csv in the grid current per toggle */
                             error: function () {
                                 cb.prop('checked', !checked);
                                 alert($uct.err_generic);