sprint2: frontend permission checks for ContactDetail + ContactsList + Field-Level UI

frontend/src/pages/ContactsList.tsx

@@ -35,11 +35,13 @@ import {
 } from '@/api/hooks';
 import { useContactFolders } from '@/api/contacts';
 import { useCustomFieldDefinitions } from '@/api/customFieldDefinitions';
+import { usePermission } from '@/hooks/usePermission';
 
 const PAGE_SIZE = 25;
 
 export function ContactsListPage() {
   const { t } = useTranslation();
+  const { hasPermission } = usePermission();
 
   const [selectedFilter, setSelectedFilter] = useState<ContactFilter>('all');
   const [search, setSearch] = useState('');
@@ -356,7 +358,7 @@ export function ContactsListPage() {
   useEffect(() => {
     const items = [
       // New contact — ganz links
-      {
+      ...(hasPermission('contacts:write') ? [{
         id: 'new',
         plugin: 'contacts',
         label: t('contacts.create'),
@@ -364,7 +366,7 @@ export function ContactsListPage() {
         group: 'create',
         icon: <Plus className="w-3.5 h-3.5" strokeWidth={2} />,
         onClick: handleCreate,
-      },
+      }] : []),
       // View mode dropdown (list / table / cards)
       {
         id: 'view-mode',
@@ -455,7 +457,7 @@ export function ContactsListPage() {
         onClick: () => setSavedFiltersOpen(true),
       },
       // Print — icon only, right side
-      {
+      ...(hasPermission('contacts:read') ? [{
         id: 'print',
         plugin: 'contacts',
         label: t('common.print', 'Drucken'),
@@ -464,7 +466,7 @@ export function ContactsListPage() {
         icon: <Printer className="w-3.5 h-3.5" strokeWidth={2} />,
         iconOnly: true,
         onClick: () => window.print(),
-      },
+      }] : []),
       // Open standalone — icon only, right side
       {
         id: 'open-standalone',