Access control: Create editor and member coach role

[ManuelMoeri]

After CanCanCan has been setup (#946) the new roles can now be created. These two roles are the 'editor' role and the 'member-coach' role. Feel free to change the names of them if you think it's not fitting enough.

Editor
The editor can edit every profile in the application.

Member-coach
The member-coach can edit profiles of people that are in the department he is member-coach off.

TODO

• Create roles as defined above
• Tests

[Miguel7373]

PR Status — Stand: 17.02.2026

Reminder: Understand the goal of this PR first, then work on it.

Done

• Implemented the Editor role
• Disabled all action buttons when the user does not have the required permissions

ToDos

• Fix failing tests
• Peer review

Open Questions / Risks (if any)

• Several tests are currently failing because:
• • Buttons have been removed, or
• • Users without sufficient permissions can no longer trigger certain actions

Proposed approach:
Make this branch dependent on Manuel’s ticket and address all related test fixes there, where permission handling can be adjusted consistently.

Any special-case or conditional logic must be documented in the PR with comments on the code segments.