schalli
4985e43412
- GroupMembersModal.tsx: chip list of current members with source badge (MANUAL/LDAP); LDAP-sourced chips carry a disabled remove button with a "managed via AD sync" tooltip (D-19) instead of an active one; second section adds manual members via GET /users + POST /groups/:id/members, already-member candidates shown disabled (upsert on the API is folgenlos, no special-case needed) - DeleteGroupDialog.tsx: loads GET /groups/:id/impact and interpolates memberCount/grantCount into the confirmation text (D-17); deliberately breaks from the project's silent-delete-failure precedent -- stays open and shows a visible error on a failed DELETE, since a silent failure here would leave an admin believing a group (and its grants) is gone while it still grants access (T-15-24) - page.tsx: wires both dialogs in, refetches the group list after any member/delete mutation so member counts and badges stay current - groups-page.test.tsx: disabled-vs-active remove button by membership source, delete text shows both numbers, visible error + dialog stays open on failed delete