Implement notification system and status update forms

- Added Notification model with admin interface for managing notifications.
- Created context processor to count unread notifications for the user.
- Introduced forms for updating the status of Risk, Control, Incident, and ResidualRisk.
- Added views for displaying and managing notifications, including marking them as read.
- Updated URLs to include routes for notifications and status updates.
- Enhanced templates to support notifications display and status update forms.
- Improved CSS for avatar and badge display in the navbar.
- Translated various static texts to support internationalization.

config/settings.py

@@ -76,6 +76,7 @@ TEMPLATES = [
                 "django.template.context_processors.request",
                 "django.contrib.auth.context_processors.auth",
                 "django.contrib.messages.context_processors.messages",
+                "risks.context_processors.unread_notifications_count",
             ],
         },
     },

locale/de/LC_MESSAGES/django.po

@@ -2,7 +2,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: wira-risk-management\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-10 11:18+0200\n"
+"POT-Creation-Date: 2025-09-10 12:51+0200\n"
 "PO-Revision-Date: 2025-09-09 13:45+0200\n"
 "Last-Translator: Kevin Heyer <kevin@example.com>\n"
 "Language-Team: German\n"
@@ -26,7 +26,8 @@ msgstr "Admin"
 msgid "Risks"
 msgstr "Risiken"
 
-#: risks/admin.py:16 risks/models.py:190 templates/risks/list_risks.html:37
+#: risks/admin.py:16 risks/models.py:190 templates/base.html:36
+#: templates/risks/list_risks.html:37
 msgid "Controls"
 msgstr "Maßnahmen"
 
@@ -38,7 +39,7 @@ msgstr "Restrisiken"
 msgid "Reviews"
 msgstr "Prüfung"
 
-#: risks/admin.py:19 risks/models.py:258
+#: risks/admin.py:19 risks/models.py:258 templates/base.html:37
 msgid "Incidents"
 msgstr "Vorfälle"
 
@@ -46,22 +47,70 @@ msgstr "Vorfälle"
 msgid "Users"
 msgstr "Benutzer"
 
-#: risks/admin.py:26
+#: risks/admin.py:133 risks/models.py:302
+msgid "User"
+msgstr "Benutzer"
+
+#: risks/admin.py:139
+msgid "Message"
+msgstr ""
+
+#: risks/admin.py:147
+msgid "Mark selected as read"
+msgstr "Alle als gelesen Markieren"
+
+#: risks/admin.py:150
+msgid "%(n)d notifications marked as read."
+msgstr "%(n)d Benachrichtigungen wurden als gelesen Markiert"
+
+#: risks/admin.py:152
+msgid "Mark selected as unread"
+msgstr "Alle als gelesen Markieren"
+
+#: risks/admin.py:155
+msgid "%(n)d notifications marked as unread."
+msgstr "%(n)d Benachrichtigungen wurden als ungelesen Markiert"
+
+#: risks/admin.py:157
+msgid "Mark selected as sent"
+msgstr ""
+
+#: risks/admin.py:160
+msgid "%(n)d notifications marked as sent."
+msgstr "Alle Benachrichtigungen wurden als gelesen Markiert"
+
+#: risks/admin.py:162
+msgid "Mark selected as unsent"
+msgstr ""
+
+#: risks/admin.py:165
+msgid "%(n)d notifications marked as unsent."
+msgstr "Alle Benachrichtigungen wurden als gelesen Markiert"
+
+#: risks/admin.py:177
 msgid "SSO Information"
 msgstr "SSO-Informationen"
 
-#: risks/admin.py:35
+#: risks/admin.py:186
 msgid "Risks Owned"
 msgstr "Eigene Risiken"
 
-#: risks/admin.py:39
+#: risks/admin.py:190
 msgid "Controls Responsible"
 msgstr "Verantwortlich für Maßnahmen"
 
-#: risks/apps.py:7
+#: risks/apps.py:7 templates/base.html:7 templates/base.html:32
 msgid "Risk Management"
 msgstr "Risikomanagement"
 
+#: risks/forms.py:9 risks/forms.py:16 risks/forms.py:23 risks/models.py:73
+msgid "Status"
+msgstr "Status"
+
+#: risks/forms.py:30 risks/models.py:42 templates/risks/item_risk.html:136
+msgid "Review required"
+msgstr "Prüfung nötig"
+
 #: risks/models.py:35 templates/risks/list_risks.html:18
 #: templates/risks/list_risks.html:83
 msgid "Risk"
@@ -79,10 +128,6 @@ msgstr "In Bearbeitung"
 msgid "Closed"
 msgstr "Geschlossen"
 
-#: risks/models.py:42
-msgid "Review required"
-msgstr "Prüfung nötig"
-
 #: risks/models.py:45
 msgid "Very low – occurs less than once every 5 years"
 msgstr "Sehr niedrig – tritt seltener als einmal in fünf Jahren auf"
@@ -159,10 +204,6 @@ msgstr "Erstellt am"
 msgid "Updated at"
 msgstr "Aktualisiert am"
 
-#: risks/models.py:73
-msgid "Status"
-msgstr "Status"
-
 #: risks/models.py:133
 msgid "Residual Risk"
 msgstr "Restrisiko"
@@ -219,9 +260,14 @@ msgstr "Meldedatum"
 msgid "Reported by"
 msgstr "Gemeldet von"
 
-#: risks/models.py:298
+#: risks/models.py:279
-msgid "User"
+msgid "Notification"
-msgstr "Benutzer"
+msgstr "Benachrichtigung"
+
+#: risks/models.py:280 templates/base.html:88
+#: templates/risks/notifications.html:4
+msgid "Notifications"
+msgstr "Nachrichten"
 
 #: risks/signals.py:57
 #, python-brace-format
@@ -289,6 +335,7 @@ msgid "Residual risk deleted for '{t}'"
 msgstr "Restrisiko für '{t}' gelöscht"
 
 #: risks/signals.py:296
+#, python-brace-format
 msgid "Incident '{t}' {s}"
 msgstr "Vorfälle '{t}' {s}"
 
@@ -302,10 +349,62 @@ msgstr "Vorfall '{t}' gelöscht"
 msgid "Follow-up reached: review required for risk '{t}'"
 msgstr "Wiedervorlagedatum erreicht: Prüfung nötig für Risiko '{t}'"
 
-#: templates/risks/dashboard.html:9
+#: risks/views.py:315
+msgid "Notification marked as read."
+msgstr "Nachricht als gelesen markiert"
+
+#: risks/views.py:323
+msgid "All notifications marked as read."
+msgstr "Alle Benachrichtigungen wurden als gelesen Markiert"
+
+#: risks/views.py:340
+msgid "Risk status updated."
+msgstr "Risikostatus Aktualisiert"
+
+#: risks/views.py:354
+msgid "Control status updated."
+msgstr "Maßnahmenstatus Aktualisiert"
+
+#: risks/views.py:368
+msgid "Incident status updated."
+msgstr "Vorfallstatus Aktualisiert"
+
+#: risks/views.py:384
+msgid "Residual review flag updated."
+msgstr "Restrisiko geprüft"
+
+#: templates/base.html:34 templates/risks/dashboard.html:9
 msgid "Dashboard"
 msgstr "Dashboard"
 
+#: templates/base.html:35 templates/risks/list_risks.html:4
+msgid "Risk analysis"
+msgstr "Risikoanalyse"
+
+#: templates/base.html:70
+msgid "AdminCP"
+msgstr "Adminbereich"
+
+#: templates/base.html:76
+msgid "Derk Mode"
+msgstr "Dark Mode"
+
+#: templates/base.html:82
+msgid "Logout"
+msgstr "Logout"
+
+#: templates/base.html:104
+msgid "Login"
+msgstr "Login"
+
+#: templates/base.html:139 templates/base.html:146
+msgid "Light Mode"
+msgstr "Light Mode"
+
+#: templates/base.html:149
+msgid "Dark Mode"
+msgstr "Dark Mode"
+
 #: templates/risks/dashboard.html:12
 msgid "Overview of Risks, Controls and Incidents"
 msgstr "Übersicht der Risiken, Maßnahmen und Vorfälle"
@@ -334,36 +433,40 @@ msgstr "Vorfälle nach Status"
 msgid "Risks by CIA"
 msgstr "CIA Risiken"
 
-#: templates/risks/item_risk.html:68 templates/risks/item_risk.html:114
+#: templates/risks/item_risk.html:34
+msgid "Update status"
+msgstr "Status Aktualisiert"
+
+#: templates/risks/item_risk.html:89 templates/risks/item_risk.html:147
 #: templates/risks/list_risks.html:86
 msgid "Likelihood"
 msgstr "Eintritt"
 
-#: templates/risks/item_risk.html:77 templates/risks/item_risk.html:123
+#: templates/risks/item_risk.html:98 templates/risks/item_risk.html:156
 #: templates/risks/list_risks.html:87
 msgid "Impact"
 msgstr "Schaden"
 
-#: templates/risks/item_risk.html:86 templates/risks/item_risk.html:132
+#: templates/risks/item_risk.html:107 templates/risks/item_risk.html:165
 #: templates/risks/list_risks.html:89
 msgid "Level"
 msgstr "Stufe"
 
-#: templates/risks/item_risk.html:95 templates/risks/item_risk.html:140
+#: templates/risks/item_risk.html:116 templates/risks/item_risk.html:173
 #: templates/risks/list_risks.html:88
 msgid "Score"
 msgstr "Score"
 
-#: templates/risks/list_risks.html:4
+#: templates/risks/item_risk.html:139
-msgid "Risk analysis"
+msgid "Save"
-msgstr "Risikoanalyse"
+msgstr "Speichern"
 
 #: templates/risks/list_risks.html:9
 msgid "Filter"
 msgstr "Filter"
 
 #: templates/risks/list_risks.html:22 templates/risks/list_risks.html:41
-#: templates/risks/list_risks.html:60
+#: templates/risks/list_risks.html:60 templates/risks/notifications.html:13
 msgid "All"
 msgstr "Alle"
 
@@ -374,3 +477,23 @@ msgstr "Risikoeigner"
 #: templates/risks/list_risks.html:84
 msgid "Asset / Process"
 msgstr "Asset / Prozess"
+
+#: templates/risks/notifications.html:12
+msgid "Unread"
+msgstr "Ungelesen"
+
+#: templates/risks/notifications.html:20
+msgid "Mark all as read"
+msgstr "Alle als gelesen Markieren"
+
+#: templates/risks/notifications.html:33
+msgid "New"
+msgstr "Neu"
+
+#: templates/risks/notifications.html:43
+msgid "Mark as read"
+msgstr "Als gelesen markieren"
+
+#: templates/risks/notifications.html:53
+msgid "No notifications."
+msgstr "Keine Nachrichten"

locale/en/LC_MESSAGES/django.po

@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2025-09-10 11:18+0200\n"
+"POT-Creation-Date: 2025-09-10 12:51+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -32,7 +32,8 @@ msgstr ""
 msgid "Risks"
 msgstr ""
 
-#: risks/admin.py:16 risks/models.py:190 templates/risks/list_risks.html:37
+#: risks/admin.py:16 risks/models.py:190 templates/base.html:36
+#: templates/risks/list_risks.html:37
 msgid "Controls"
 msgstr ""
 
@@ -44,7 +45,7 @@ msgstr ""
 msgid "Reviews"
 msgstr ""
 
-#: risks/admin.py:19 risks/models.py:258
+#: risks/admin.py:19 risks/models.py:258 templates/base.html:37
 msgid "Incidents"
 msgstr ""
 
@@ -52,22 +53,74 @@ msgstr ""
 msgid "Users"
 msgstr ""
 
-#: risks/admin.py:26
+#: risks/admin.py:133 risks/models.py:302
+msgid "User"
+msgstr ""
+
+#: risks/admin.py:139
+msgid "Message"
+msgstr ""
+
+#: risks/admin.py:147
+msgid "Mark selected as read"
+msgstr ""
+
+#: risks/admin.py:150
+#, python-format
+msgid "%(n)d notifications marked as read."
+msgstr ""
+
+#: risks/admin.py:152
+msgid "Mark selected as unread"
+msgstr ""
+
+#: risks/admin.py:155
+#, python-format
+msgid "%(n)d notifications marked as unread."
+msgstr ""
+
+#: risks/admin.py:157
+msgid "Mark selected as sent"
+msgstr ""
+
+#: risks/admin.py:160
+#, python-format
+msgid "%(n)d notifications marked as sent."
+msgstr ""
+
+#: risks/admin.py:162
+msgid "Mark selected as unsent"
+msgstr ""
+
+#: risks/admin.py:165
+#, python-format
+msgid "%(n)d notifications marked as unsent."
+msgstr ""
+
+#: risks/admin.py:177
 msgid "SSO Information"
 msgstr ""
 
-#: risks/admin.py:35
+#: risks/admin.py:186
 msgid "Risks Owned"
 msgstr ""
 
-#: risks/admin.py:39
+#: risks/admin.py:190
 msgid "Controls Responsible"
 msgstr ""
 
-#: risks/apps.py:7
+#: risks/apps.py:7 templates/base.html:7 templates/base.html:32
 msgid "Risk Management"
 msgstr ""
 
+#: risks/forms.py:9 risks/forms.py:16 risks/forms.py:23 risks/models.py:73
+msgid "Status"
+msgstr ""
+
+#: risks/forms.py:30 risks/models.py:42 templates/risks/item_risk.html:136
+msgid "Review required"
+msgstr ""
+
 #: risks/models.py:35 templates/risks/list_risks.html:18
 #: templates/risks/list_risks.html:83
 msgid "Risk"
@@ -85,10 +138,6 @@ msgstr ""
 msgid "Closed"
 msgstr ""
 
-#: risks/models.py:42
-msgid "Review required"
-msgstr ""
-
 #: risks/models.py:45
 msgid "Very low – occurs less than once every 5 years"
 msgstr ""
@@ -165,10 +214,6 @@ msgstr ""
 msgid "Updated at"
 msgstr ""
 
-#: risks/models.py:73
-msgid "Status"
-msgstr ""
-
 #: risks/models.py:133
 msgid "Residual Risk"
 msgstr ""
@@ -225,8 +270,13 @@ msgstr ""
 msgid "Reported by"
 msgstr ""
 
-#: risks/models.py:298
+#: risks/models.py:279
-msgid "User"
+msgid "Notification"
+msgstr ""
+
+#: risks/models.py:280 templates/base.html:88
+#: templates/risks/notifications.html:4
+msgid "Notifications"
 msgstr ""
 
 #: risks/signals.py:57
@@ -309,10 +359,62 @@ msgstr ""
 msgid "Follow-up reached: review required for risk '{t}'"
 msgstr ""
 
-#: templates/risks/dashboard.html:9
+#: risks/views.py:315
+msgid "Notification marked as read."
+msgstr ""
+
+#: risks/views.py:323
+msgid "All notifications marked as read."
+msgstr ""
+
+#: risks/views.py:340
+msgid "Risk status updated."
+msgstr ""
+
+#: risks/views.py:354
+msgid "Control status updated."
+msgstr ""
+
+#: risks/views.py:368
+msgid "Incident status updated."
+msgstr ""
+
+#: risks/views.py:384
+msgid "Residual review flag updated."
+msgstr ""
+
+#: templates/base.html:34 templates/risks/dashboard.html:9
 msgid "Dashboard"
 msgstr ""
 
+#: templates/base.html:35 templates/risks/list_risks.html:4
+msgid "Risk analysis"
+msgstr ""
+
+#: templates/base.html:70
+msgid "AdminCP"
+msgstr ""
+
+#: templates/base.html:76
+msgid "Derk Mode"
+msgstr ""
+
+#: templates/base.html:82
+msgid "Logout"
+msgstr ""
+
+#: templates/base.html:104
+msgid "Login"
+msgstr ""
+
+#: templates/base.html:139 templates/base.html:146
+msgid "Light Mode"
+msgstr ""
+
+#: templates/base.html:149
+msgid "Dark Mode"
+msgstr ""
+
 #: templates/risks/dashboard.html:12
 msgid "Overview of Risks, Controls and Incidents"
 msgstr ""
@@ -341,28 +443,32 @@ msgstr ""
 msgid "Risks by CIA"
 msgstr ""
 
-#: templates/risks/item_risk.html:68 templates/risks/item_risk.html:114
+#: templates/risks/item_risk.html:34
+msgid "Update status"
+msgstr ""
+
+#: templates/risks/item_risk.html:89 templates/risks/item_risk.html:147
 #: templates/risks/list_risks.html:86
 msgid "Likelihood"
 msgstr ""
 
-#: templates/risks/item_risk.html:77 templates/risks/item_risk.html:123
+#: templates/risks/item_risk.html:98 templates/risks/item_risk.html:156
 #: templates/risks/list_risks.html:87
 msgid "Impact"
 msgstr ""
 
-#: templates/risks/item_risk.html:86 templates/risks/item_risk.html:132
+#: templates/risks/item_risk.html:107 templates/risks/item_risk.html:165
 #: templates/risks/list_risks.html:89
 msgid "Level"
 msgstr ""
 
-#: templates/risks/item_risk.html:95 templates/risks/item_risk.html:140
+#: templates/risks/item_risk.html:116 templates/risks/item_risk.html:173
 #: templates/risks/list_risks.html:88
 msgid "Score"
 msgstr ""
 
-#: templates/risks/list_risks.html:4
+#: templates/risks/item_risk.html:139
-msgid "Risk analysis"
+msgid "Save"
 msgstr ""
 
 #: templates/risks/list_risks.html:9
@@ -370,7 +476,7 @@ msgid "Filter"
 msgstr ""
 
 #: templates/risks/list_risks.html:22 templates/risks/list_risks.html:41
-#: templates/risks/list_risks.html:60
+#: templates/risks/list_risks.html:60 templates/risks/notifications.html:13
 msgid "All"
 msgstr ""
 
@@ -381,3 +487,23 @@ msgstr ""
 #: templates/risks/list_risks.html:84
 msgid "Asset / Process"
 msgstr ""
+
+#: templates/risks/notifications.html:12
+msgid "Unread"
+msgstr ""
+
+#: templates/risks/notifications.html:20
+msgid "Mark all as read"
+msgstr ""
+
+#: templates/risks/notifications.html:33
+msgid "New"
+msgstr ""
+
+#: templates/risks/notifications.html:43
+msgid "Mark as read"
+msgstr ""
+
+#: templates/risks/notifications.html:53
+msgid "No notifications."
+msgstr ""

risks/admin.py

@@ -1,7 +1,7 @@
 from django.contrib import admin
 from django.contrib.auth.admin import UserAdmin as BaseUserAdmin
 from django.utils.translation import gettext_lazy as _
-from .models import Control, Incident, NotificationPreference , Risk, ResidualRisk, User
+from .models import Control, Incident, Notification, NotificationPreference , Risk, ResidualRisk, User
 
 admin.site.site_header = _("Administration")
 admin.site.site_title = _("Admin")
@@ -20,24 +20,6 @@ class NotificationPreferenceInline(admin.StackedInline):
         (_("Users"), {"fields": ("user_created","user_deleted")}),
     )
 
-@admin.register(User)
-class UserAdmin(BaseUserAdmin):
-    fieldsets = BaseUserAdmin.fieldsets + (
-        (_("SSO Information"), {"fields": ("is_sso_user",)}),
-    )
-    list_display = ("username", "email", "is_staff", "is_superuser", "is_sso_user",
-                    "owned_risks_count", "responsible_controls_count")
-    
-    inlines = [NotificationPreferenceInline]
-
-    def owned_risks_count(self, obj):
-        return obj.risks_owned.count()
-    owned_risks_count.short_description = _("Risks Owned")
-
-    def responsible_controls_count(self, obj):
-        return obj.controls_responsible.count()
-    responsible_controls_count.short_description = _("Controls Responsible")
-
 class ResidualRiskInline(admin.StackedInline):
     """
     Inline editor for ResidualRisk, linked one-to-one with Risk
@@ -135,3 +117,74 @@ class IncidentAdmin(admin.ModelAdmin):
         obj._changed_by = request.user
         super().delete_model(request, obj)
 
+@admin.register(Notification)
+class NotificationAdmin(admin.ModelAdmin):
+
+    date_hierarchy = "created_at"
+    list_display = ("id", "created_at", "user_display", "short_message", "read", "sent")
+    list_display_links = ("id", "short_message")
+    list_filter = ("read", "sent", "created_at")
+    search_fields = ("message", "user__username", "user__first_name", "user__last_name", "user__email")
+    list_select_related = ("user",)
+    list_editable = ("read", "sent")
+    ordering = ("-created_at",)
+    autocomplete_fields = ("user",)
+
+    @admin.display(description=_("User"))
+    def user_display(self, obj):
+        if not obj.user:
+            return "—"
+        return obj.user.get_full_name() or obj.user.username
+
+    @admin.display(description=_("Message"))
+    def short_message(self, obj):
+        msg = obj.message or ""
+        return (msg[:80] + "…") if len(msg) > 80 else msg
+
+    # Bulk-Aktionen
+    actions = ["mark_as_read", "mark_as_unread", "mark_as_sent", "mark_as_unsent"]
+
+    @admin.action(description=_("Mark selected as read"))
+    def mark_as_read(self, request, queryset):
+        n = queryset.update(read=True)
+        self.message_user(request, _("%(n)d notifications marked as read.") % {"n": n})
+
+    @admin.action(description=_("Mark selected as unread"))
+    def mark_as_unread(self, request, queryset):
+        n = queryset.update(read=False)
+        self.message_user(request, _("%(n)d notifications marked as unread.") % {"n": n})
+
+    @admin.action(description=_("Mark selected as sent"))
+    def mark_as_sent(self, request, queryset):
+        n = queryset.update(sent=True)
+        self.message_user(request, _("%(n)d notifications marked as sent.") % {"n": n})
+
+    @admin.action(description=_("Mark selected as unsent"))
+    def mark_as_unsent(self, request, queryset):
+        n = queryset.update(sent=False)
+        self.message_user(request, _("%(n)d notifications marked as unsent.") % {"n": n})
+
+class NotificationInline(admin.TabularInline):
+    model = Notification
+    fields = ("created_at", "message", "read", "sent")
+    readonly_fields = ("created_at", "message")
+    extra = 0
+    ordering = ("-created_at",)
+
+@admin.register(User)
+class UserAdmin(BaseUserAdmin):
+    fieldsets = BaseUserAdmin.fieldsets + (
+        (_("SSO Information"), {"fields": ("is_sso_user",)}),
+    )
+    list_display = ("username", "email", "is_staff", "is_superuser", "is_sso_user",
+                    "owned_risks_count", "responsible_controls_count")
+    
+    inlines = [NotificationInline, NotificationPreferenceInline]
+
+    def owned_risks_count(self, obj):
+        return obj.risks_owned.count()
+    owned_risks_count.short_description = _("Risks Owned")
+
+    def responsible_controls_count(self, obj):
+        return obj.controls_responsible.count()
+    responsible_controls_count.short_description = _("Controls Responsible")

risks/context_processors.py

@@ -0,0 +1,7 @@
+def unread_notifications_count(request):
+    if not request.user.is_authenticated:
+        return {"notifications_unread_count": 0}
+    from .models import Notification
+    return {
+        "notifications_unread_count": Notification.objects.filter(user=request.user, read=False).count()
+    }

risks/forms.py

@@ -0,0 +1,31 @@
+from django import forms
+from django.utils.translation import gettext_lazy as _
+from .models import Risk, Control, Incident, ResidualRisk
+
+class RiskStatusForm(forms.ModelForm):
+    class Meta:
+        model = Risk
+        fields = ["status"]
+        labels = {"status": _("Status")}
+        widgets = {"status": forms.Select(attrs={"class": "select"})}
+
+class ControlStatusForm(forms.ModelForm):
+    class Meta:
+        model = Control
+        fields = ["status"]
+        labels = {"status": _("Status")}
+        widgets = {"status": forms.Select(attrs={"class": "select"})}
+
+class IncidentStatusForm(forms.ModelForm):
+    class Meta:
+        model = Incident
+        fields = ["status"]
+        labels = {"status": _("Status")}
+        widgets = {"status": forms.Select(attrs={"class": "select"})}
+
+class ResidualReviewForm(forms.ModelForm):
+    class Meta:
+        model = ResidualRisk
+        fields = ["review_required"]
+        labels = {"review_required": _("Review required")}
+        widgets = {"review_required": forms.CheckboxInput(attrs={"class": "checkbox"})}

risks/migrations/0022_alter_notification_options.py

@@ -0,0 +1,19 @@
+# Generated by Django 5.2.6 on 2025-09-10 10:53
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("risks", "0021_risk_status_notificationpreference"),
+    ]
+
+    operations = [
+        migrations.AlterModelOptions(
+            name="notification",
+            options={
+                "verbose_name": "Notification",
+                "verbose_name_plural": "Notifications",
+            },
+        ),
+    ]

risks/models.py

@@ -275,6 +275,10 @@ class Incident(models.Model):
     updated_at = models.DateTimeField(auto_now=True)
 
 class Notification(models.Model):
+    class Meta:
+        verbose_name = _("Notification")
+        verbose_name_plural = _("Notifications")
+
     user = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.SET_NULL, null=True, blank=True, related_name="notifications")
 
     message = models.TextField()

risks/urls.py

@@ -5,6 +5,7 @@ app_name = "risks"
 
 urlpatterns = [
   path("", views.dashboard, name="dashboard"),
+
   path("risks/index", views.dashboard, name="index"),
   path("risks/list_risks", views.list_risks, name="list_risks"),
   path("risks/risks/<int:id>", views.show_risk, name="show_risk"),
@@ -12,4 +13,15 @@ urlpatterns = [
   path("risks/controls/<int:id>", views.show_control, name="show_control"),
   path("risks/list_incidents", views.list_incidents, name="list_incidents"),
   path("risks/incidents/<int:id>", views.show_incident, name="show_incident"),
+
+  # Notifications
+  path("notifications/", views.notifications, name="notifications"),
+  path("notifications/<int:pk>/read", views.notification_mark_read, name="notification_mark_read"),
+  path("notifications/mark_all_read", views.notification_mark_all_read, name="notification_mark_all_read"),
+
+  # Risks status
+  path("risks/<int:id>/status", views.update_risk_status, name="update_risk_status"),
+  path("controls/<int:id>/status", views.update_control_status, name="update_control_status"),
+  path("incidents/<int:id>/status", views.update_incident_status, name="update_incident_status"),
+  path("residuals/<int:risk_id>/review", views.update_residual_review, name="update_residual_review"),
 ]

risks/views.py

@@ -2,16 +2,29 @@ from django.contrib.admin.models import LogEntry
 from django.contrib.auth import get_user_model
 from django.contrib.auth.decorators import login_required
 from django.contrib.contenttypes.models import ContentType
+from django.contrib import messages
 from django.db.models import Count, Q
+from django.http import HttpResponseForbidden
+from django.shortcuts import redirect, render, get_object_or_404
+from django.utils.translation import gettext_lazy as _
 from rest_framework import viewsets
 from rest_framework.permissions import IsAuthenticated
-from django.shortcuts import render, get_object_or_404
 from collections import Counter
+from .forms import RiskStatusForm, ControlStatusForm, IncidentStatusForm, ResidualReviewForm
 from .models import Risk, Control, ResidualRisk, AuditLog, Incident, Notification
 from .serializers import ControlSerializer, RiskSerializer, ResidualRiskSerializer, UserSerializer, AuditSerializer, IncidentSerializer
 
 User = get_user_model()
 
+def _can_edit_risk(user, risk: Risk) -> bool:
+    return bool(user.is_staff or (risk.owner_id and risk.owner_id == user.id))
+
+def _can_edit_control(user, control: Control) -> bool:
+    return bool(user.is_staff or (control.responsible_id and control.responsible_id == user.id))
+
+def _can_edit_incident(user, incident: Incident) -> bool:
+    return bool(user.is_staff or (incident.reported_by_id and incident.reported_by_id == user.id))
+
 # ---------------------------------------------------------------------------
 # API
 # ---------------------------------------------------------------------------
@@ -274,3 +287,99 @@ def dashboard(request):
         'notifications_unread': notifications_unread,
     }
     return render(request, 'risks/dashboard.html', context)
+
+# ---------------------------------------------------------------------------
+# Notifications
+# ---------------------------------------------------------------------------
+
+@login_required
+def notifications(request):
+    """Eigene Benachrichtigungen ansehen + filtern"""
+    flt = request.GET.get("filter", "unread")
+    qs = Notification.objects.filter(user=request.user).order_by("-created_at")
+    if flt == "unread":
+        qs = qs.filter(read=False)
+    # Einfache Pagination (optional)
+    return render(request, "risks/notifications.html", {
+        "notifications": qs,
+        "filter": flt,
+    })
+
+@login_required
+def notification_mark_read(request, pk):
+    if request.method != "POST":
+        return HttpResponseForbidden()
+    notif = get_object_or_404(Notification, pk=pk, user=request.user)
+    notif.read = True
+    notif.save(update_fields=["read"])
+    messages.success(request, _("Notification marked as read."))
+    return redirect(request.META.get("HTTP_REFERER") or "risks:notifications")
+
+@login_required
+def notification_mark_all_read(request):
+    if request.method != "POST":
+        return HttpResponseForbidden()
+    Notification.objects.filter(user=request.user, read=False).update(read=True)
+    messages.success(request, _("All notifications marked as read."))
+    return redirect("risks:notifications")
+
+# ---------------------------------------------------------------------------
+# Status Updates
+# ---------------------------------------------------------------------------
+@login_required
+def update_risk_status(request, id):
+    risk = get_object_or_404(Risk, pk=id)
+    if not _can_edit_risk(request.user, risk):
+        return HttpResponseForbidden()
+    if request.method == "POST":
+        form = RiskStatusForm(request.POST, instance=risk)
+        if form.is_valid():
+            obj = form.save(commit=False)
+            obj._changed_by = request.user
+            obj.save(update_fields=["status", "updated_at"])
+            messages.success(request, _("Risk status updated."))
+    return redirect("risks:show_risk", id=risk.pk)
+
+@login_required
+def update_control_status(request, id):
+    control = get_object_or_404(Control, pk=id)
+    if not _can_edit_control(request.user, control):
+        return HttpResponseForbidden()
+    if request.method == "POST":
+        form = ControlStatusForm(request.POST, instance=control)
+        if form.is_valid():
+            obj = form.save(commit=False)
+            obj._changed_by = request.user
+            obj.save(update_fields=["status", "updated_at"])
+            messages.success(request, _("Control status updated."))
+    return redirect("risks:show_control", id=control.pk)
+
+@login_required
+def update_incident_status(request, id):
+    incident = get_object_or_404(Incident, pk=id)
+    if not _can_edit_incident(request.user, incident):
+        return HttpResponseForbidden()
+    if request.method == "POST":
+        form = IncidentStatusForm(request.POST, instance=incident)
+        if form.is_valid():
+            obj = form.save(commit=False)
+            obj._changed_by = request.user
+            obj.save(update_fields=["status", "updated_at"])
+            messages.success(request, _("Incident status updated."))
+    return redirect("risks:show_incident", id=incident.pk)
+
+@login_required
+def update_residual_review(request, risk_id):
+    """Review-Flag (Restrisiko) setzen/lösen"""
+    risk = get_object_or_404(Risk, pk=risk_id)
+    if not _can_edit_risk(request.user, risk):
+        return HttpResponseForbidden()
+    residual, created_resid = ResidualRisk.objects.get_or_create(risk=risk)
+    if request.method == "POST":
+        form = ResidualReviewForm(request.POST, instance=residual)
+        if form.is_valid():
+            obj = form.save(commit=False)
+            obj._changed_by = request.user
+            obj.save(update_fields=["review_required", "updated_at"])
+            messages.success(request, _("Residual review flag updated."))
+    return redirect("risks:show_risk", id=risk.pk)

static/css/design.css

@@ -243,4 +243,35 @@ body.dark-mode a {
 
 @media (max-width: 1215px) {
   .risk-chip { --chip-w: 100%; width: var(--chip-w); }
-}
+}
+
+/* Container für Avatar + Badge */
+.avatar-wrap {
+  position: relative;
+  display: inline-block;
+}
+
+.avatar-wrap .badge {
+  position: absolute;
+  top: -0.35rem;
+  right: -0.35rem;
+  min-width: 1.25rem;
+  height: 1.25rem;
+  padding: 0 .25rem;
+  font-size: 0.75rem;
+  line-height: 1.25rem;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  box-shadow: 0 0 0 2px #fff;
+}
+
+.avatar-wrap .tag.is-medium + .badge {
+  min-width: 1.15rem;
+  height: 1.15rem;
+  font-size: 0.70rem;
+  line-height: 1.15rem;
+}
+
+/* Dark-Mode/ 
+.navbar.is-dark .avatar-wrap .badge { box-shadow: 0 0 0 2px hsl(229, 53%, 18%); }

templates/base.html

@@ -1,9 +1,10 @@
 {% load static %}
+{% load i18n %}
 <!DOCTYPE html>
 <html lang="de">
 <head>
   <meta charset="UTF-8">
-  <title>Risiko Management</title>
+  <title>{% trans "Risk Management" %}</title>
   <link rel="stylesheet" href="{% static 'css/bulma.min.css' %}">
   <link rel="stylesheet" href="{% static 'css/design.css' %}">
   <link rel="stylesheet" href="{% static 'css/fontawesome.min.css' %}">
@@ -28,12 +29,12 @@
       <div id="mainNavbar" class="navbar-menu">
         <div class="navbar-start">
           <div class="navbar-item has-dropdown is-hoverable">
-            <a class="navbar-link">Risikomanagement</a>
+            <a class="navbar-link">{% trans "Risk Management" %}</a>
             <div class="navbar-dropdown">
-              <a class="navbar-item" href="/risks/index">Dashboard</a>
+              <a class="navbar-item" href="/risks/index">{% trans "Dashboard" %}</a>
-              <a class="navbar-item" href="/risks/list_risks">Risikoanalyse</a>
+              <a class="navbar-item" href="/risks/list_risks">{% trans "Risk analysis" %}</a>
-              <a class="navbar-item" href="/risks/list_controls">Maßnahmen</a>
+              <a class="navbar-item" href="/risks/list_controls">{% trans "Controls" %}</a>
-              <a class="navbar-item" href="/risks/list_incidents">Vorfälle</a>
+              <a class="navbar-item" href="/risks/list_incidents">{% trans "Incidents" %}</a>
             </div>
           </div>
 
@@ -44,13 +45,6 @@
       <div class="navbar-end">
         <!-- Suche -->
         <div class="navbar-item">
-          <!--
-          <div class="field">
-            <p class="control">
-              <input class="input is-small" type="text" placeholder="Suchen">
-            </p>
-          </div>
-          -->
         </div>
 
         {% if request.user.is_authenticated %}
@@ -58,27 +52,44 @@
           <div class="navbar-item has-dropdown is-hoverable">
             <a class="navbar-link">
               <!-- Initialen-Badge -->
+            <span class="avatar-wrap">
               <span class="tag is-link is-light is-medium is-rounded"
                     style="width:2.25rem;height:2.25rem;display:inline-flex;align-items:center;justify-content:center;">
                 {{ request.user.username|slice:":2"|upper }}
               </span>
+
+              {% if notifications_unread_count %}
+                <span class="badge tag is-danger is-rounded">
+                  {% if notifications_unread_count > 99 %}99+{% else %}{{ notifications_unread_count }}{% endif %}
+                </span>
+              {% endif %}
+            </span>
+
+
             </a>
 
             <div class="navbar-dropdown is-right">
               {% if request.user.is_staff %}
-                <a class="navbar-item" href="/admin/">Admin</a>
+                <a class="navbar-item" href="/admin/">{% trans "AdminCP" %}</a>
                 <hr class="navbar-divider">
               {% endif %}
 
+              <a class="navbar-item" href="{% url 'risks:notifications' %}">
+                {% trans "Notifications" %}
+                {% if notifications_unread_count %}
+                  <span class="tag is-danger is-rounded" style="margin-left:.5rem;">{{ notifications_unread_count }}</span>
+                {% endif %}
+              </a>
+
               <!-- Dark Mode Toggle -->
-              <button id="dark-mode-toggle" class="button is-small is-light">
+              <a id="dark-mode-toggle" class="navbar-item is-small is-light">
-                🌙 Dark Mode
+                🌙 {% trans "Derk Mode" %}
-              </button>
+              </a>
 
               <!-- Logout als POST über Hidden-Form -->
               <a class="navbar-item" href="#"
                 onclick="document.getElementById('logout-form').submit(); return false;">
-                Logout
+                {% trans "Logout" %}
               </a>
             </div>
           </div><!-- Profil-Dropdown Ende -->
@@ -93,7 +104,7 @@
           <div class="navbar-item">
             <div class="buttons">
               <a class="button is-primary is-light" href="{% url 'login' %}">
-                <strong>Login</strong>
+                <strong>{% trans "Login" %}</strong>
               </a>
             </div>
           </div>
@@ -128,17 +139,17 @@
     // Dark Mode aus localStorage laden
     if (localStorage.getItem('darkMode') === 'enabled') {
       document.body.classList.add('dark-mode');
-      toggleButton.textContent = '☀️ Light Mode';
+      toggleButton.textContent = '☀️ {% trans "Light Mode" %}';
     }
 
     toggleButton.addEventListener('click', () => {
       document.body.classList.toggle('dark-mode');
       if (document.body.classList.contains('dark-mode')) {
         localStorage.setItem('darkMode', 'enabled');
-        toggleButton.textContent = '☀️ Light Mode';
+        toggleButton.textContent = '☀️ {% trans "Light Mode" %}';
       } else {
         localStorage.setItem('darkMode', 'disabled');
-        toggleButton.textContent = '🌙 Dark Mode';
+        toggleButton.textContent = '🌙 {% trans "Dark Mode" %}';
       }
     });
 

templates/risks/item_control.html

@@ -1,4 +1,5 @@
 {% extends "base.html" %}
+{% load i18n risk_extras %}
 {% block crumbs %}
   <li><a href="{% url 'risks:list_controls' %}">Maßnahmen</a></li>
   <li><a href="{% url 'risks:show_control' control.id %}">{{ control.title }}</a></li>
@@ -16,7 +17,26 @@
     <header class="card-header">
       <p class="card-header-title">Überblick</p>
 
-      {% if request.user.is_staff %}
+      {% if request.user.is_staff or control.responsible.id == request.user.id %}
+        <form method="post" action="{% url 'risks:update_control_status' control.id %}" class="card-header-icon" style="margin-left:auto;">
+          {% csrf_token %}
+          <div class="field has-addons">
+            <div class="control">
+              <div class="select is-small">
+                <select name="status">
+                  {% for value,label in control.STATUS_CHOICES %}
+                    <option value="{{ value }}" {% if control.status == value %}selected{% endif %}>{{ label }}</option>
+                  {% endfor %}
+                </select>
+              </div>
+            </div>
+            <div class="control">
+              <button class="button is-small is-link">
+                <span class="icon"><i class="fas fa-save"></i></span>
+              </button>
+            </div>
+          </div>
+        </form>
         <a class="card-header-icon has-text-warning" href="{% url 'admin:risks_control_change' control.pk %}" title="Maßnahme bearbeiten">
           <span class="icon"><i class="fas fa-edit" aria-hidden="true"></i></span>
         </a>

templates/risks/item_incident.html

@@ -16,7 +16,26 @@
     <header class="card-header">
       <p class="card-header-title">Überblick</p>
 
-      {% if request.user.is_staff %}
+      {% if request.user.is_staff or incident.reported_by_id == request.user.id %}
+        <form method="post" action="{% url 'risks:update_incident_status' incident.id %}" class="card-header-icon" style="margin-left:auto;">
+          {% csrf_token %}
+          <div class="field has-addons">
+            <div class="control">
+              <div class="select is-small">
+                <select name="status">
+                  {% for value,label in incident.STATUS_CHOICES %}
+                    <option value="{{ value }}" {% if incident.status == value %}selected{% endif %}>{{ label }}</option>
+                  {% endfor %}
+                </select>
+              </div>
+            </div>
+            <div class="control">
+              <button class="button is-small is-link">
+                <span class="icon"><i class="fas fa-save"></i></span>
+              </button>
+            </div>
+          </div>
+        </form>
         <a class="card-header-icon has-text-warning" href="{% url 'admin:risks_incident_change' incident.pk %}" title="Vorfall bearbeiten">
           <span class="icon"><i class="fas fa-edit" aria-hidden="true"></i></span>
         </a>

templates/risks/item_risk.html

@@ -1,23 +1,43 @@
 {% extends "base.html" %}
 {% load i18n risk_extras %}
 {% block crumbs %}
-  <li><a href="{% url 'risks:list_risks' %}">Risikoanalyse</a></li>
+  <li><a href="{% url 'risks:list_risks' %}">{% trans "Risk analysis" %}</a></li>
   <li><a href="{% url 'risks:show_risk' risk.id %}">{{ risk.title }}</a></li>
 {% endblock %}
 {% block content %}
 <div class="container">
   <section class="hero is-small">
     <div class="hero-body">
-      <p class="title">Risiko: {{ risk.title }}</p>
+      <p class="title">{% trans "Risk" %}: {{ risk.title }}</p>
       <p class="subtitle is-6">{{ risk.description }}</p>
     </div>
   </section>
   <!-- Überblick-->
   <div class="card">
     <header class="card-header">
-      <p class="card-header-title">Überblick</p>
+      <p class="card-header-title">{% trans "Overview" %}</p>
+
+      {% if request.user.is_staff or risk.owner_id == request.user.id %}
+        <form method="post" action="{% url 'risks:update_risk_status' risk.id %}" class="card-header-icon" style="margin-left:auto;">
+          {% csrf_token %}
+          <div class="field has-addons">
+            <div class="control">
+              <div class="select is-small">
+                <select name="status">
+                  {% for value,label in risk.STATUS_CHOICES %}
+                    <option value="{{ value }}" {% if risk.status == value %}selected{% endif %}>{{ label }}</option>
+                  {% endfor %}
+                </select>
+              </div>
+            </div>
+            <div class="control">
+              <button class="button is-small is-link" title="{% trans 'Update status' %}">
+                <span class="icon"><i class="fas fa-save"></i></span>
+              </button>
+            </div>
+          </div>
+        </form>
 
-      {% if request.user.is_staff %}
         <a class="card-header-icon has-text-warning" href="{% url 'admin:risks_risk_change' risk.pk %}" title="Risiko bearbeiten">
           <span class="icon"><i class="fas fa-edit" aria-hidden="true"></i></span>
         </a>
@@ -30,29 +50,30 @@
     <div class="card-content">
         <div class="columns is-multiline">
           <div class="column is-half">
-            <p><strong>Asset:</strong> {{ risk.asset|default:"-" }}</p>
+            <p><strong>{% trans "Asset" %}:</strong> {{ risk.asset|default:"-" }}</p>
-            <p><strong>Prozess:</strong> {{ risk.process|default:"-" }}</p>
+            <p><strong>{% trans "Process" %}:</strong> {{ risk.process|default:"-" }}</p>
-            <p><strong>Kategorie:</strong> {{ risk.category|default:"-" }}</p>
+            <p><strong>{% trans "Category" %}:</strong> {{ risk.category|default:"-" }}</p>
             <p>
-              <strong>Schutzziele:</strong>
+              <strong>{% trans "Protection goals" %}:</strong>
               {% if risk.cia %}
                 {{ risk.get_cia_display }}
               {% else %}
-                <span class="has-text-grey">Noch nicht zugewiesen</span>
+                <span class="has-text-grey">{% trans "Not yet assigned" %}</span>
               {% endif %}
             </p>
+            <p><strong>{% trans "Status" %}:</strong> {{ risk.status }}</p>
           </div>
           <div class="column is-half">
-            <p><strong>Risikoeigner:</strong> {{ risk.owner|user_display|default:"-" }}</p>
+            <p><strong>{% trans "Risk owner" %}:</strong> {{ risk.owner|user_display|default:"-" }}</p>
-            <p><strong>Erstellt am:</strong> {{ risk.created_at|date:'d.m.Y H:i' }}</p>
+            <p><strong>{% trans "Created at" %}:</strong> {{ risk.created_at|date:'d.m.Y H:i' }}</p>
-            <p><strong>Aktualisiert am:</strong> {{ risk.updated_at|date:'d.m.Y H:i' }}</p>
+            <p><strong>{% trans "updated at" %}:</strong> {{ risk.updated_at|date:'d.m.Y H:i' }}</p>
-            <p><strong>Wiedervorlage am:</strong> {{ risk.follow_up|date:'d.m.Y' }}</p>
+            <p><strong>{% trans "Resubmission" %}:</strong> {{ risk.follow_up|date:'d.m.Y' }}</p>
           </div>
         </div>
         <!-- Risikobewertung -->
         <section class="hero has-text-centered is-small">
           <div class="hero-body">
-            <p class="title">Risikobewertung</p>
+            <p class="title">{% trans "Risk assessment" %}</p>
           </div>
         </section>
         <div class="columns is-multiline">
@@ -60,13 +81,13 @@
           <!-- Bruttorisiko -->
           <div class="column is-full-mobile is-full-tablet is-half-desktop has-text-centered is-flex">
             <div class="box is-flex is-flex-direction-column is-flex-grow-1">
-              <h4>Brutto (vor Maßnahmen)</h4>
+              <h4>{% trans "Gross (before measures)" %}</h4>
               <div class="columns is-multiline">
 
                 <!-- Eintrittswahrscheinlichkeit -->
                 <div class="column is-full-mobile is-full-tablet is-half-desktop has-text-centered">
                   <button class="risk-chip {{ risk.likelihood|likelihood_class }}" type="button" aria-label="{% trans 'Likelihood' as likelihood_long_name %}">
-                    <span class="chip-head">Eintrittswahrscheinlichkeit</span>
+                    <span class="chip-head">{% trans "Probability of occurrence" %}</span>
                     <span class="chip-id">{{ risk.likelihood }}</span>
                     <span class="chip-label">{{ risk.get_likelihood_display }}</span>
                   </button>
@@ -75,7 +96,7 @@
                 <!-- Schadensausmaß -->
                 <div class="column is-full-mobile is-full-tablet is-half-desktop has-text-centered">
                   <button class="risk-chip {{ risk.impact|impact_class }}" type="button" aria-label="{% trans 'Impact' as impact_long_name %}">
-                    <span class="chip-head">Schadensausmaß</span>
+                    <span class="chip-head">{% trans "Extent of damage" %}</span>
                     <span class="chip-id">{{ risk.impact }}</span>
                     <span class="chip-label">{{ risk.get_impact_display }}</span>
                   </button>
@@ -84,7 +105,7 @@
                 <!-- Stufe -->
                 <div class="column is-full-mobile is-full-tablet is-half-desktop has-text-centered">
                   <button class="risk-chip {{ risk.level|level_class }}" type="button" aria-label="{% trans 'Level' %}">
-                    <span class="chip-head">Stufe</span>
+                    <span class="chip-head">{% trans "Level" %}</span>
                     <span class="chip-id">{{ risk.level|level_id }}</span>
                     <span class="chip-label">{{ risk.level }}</span>
                   </button>
@@ -93,7 +114,7 @@
                 <!-- Score -->
                 <div class="column is-full-mobile is-full-tablet is-half-desktop has-text-centered">
                   <button class="risk-chip {{ risk.score|score_class }}" type="button" aria-label="{% trans 'Score' %}">
-                    <span class="chip-head">Score</span>
+                    <span class="chip-head">{% trans "Score" %}</span>
                     <span class="chip-id">{{ risk.score }}</span>
                     <span class="chip-label">Score (max. 20)</span>
                   </button>
@@ -106,13 +127,13 @@
           <!-- Nettorisiko -->
           <div class="column is-full-mobile is-full-tablet is-half-desktop has-text-centered is-flex">
             <div class="box is-flex is-flex-direction-column is-flex-grow-1">
-              <h4>Netto (nach Maßnahmen)</h4>
+              <h4>{% trans "Net (after measures)" %}</h4>
               <div class="columns is-multiline">
               {% if risk.residual_risk %}
                 <!-- Eintrittswahrscheinlichkeit -->
                 <div class="column is-full-mobile is-full-tablet is-half-desktop has-text-centered">
                   <button class="risk-chip {{ risk.residual_risk.likelihood|likelihood_class }}" type="button" aria-label="{% trans 'Likelihood' as likelihood_long_name %}">
-                    <span class="chip-head">Eintrittswahrscheinlichkeit</span>
+                    <span class="chip-head">{% trans "Probability of occurrence" %}</span>
                     <span class="chip-id">{{ risk.residual_risk.likelihood }}</span>
                     <span class="chip-label">{{ risk.residual_risk.get_likelihood_display }}</span>
                   </button>
@@ -121,7 +142,7 @@
                 <!-- Schadensausmaß -->
                 <div class="column is-full-mobile is-full-tablet is-half-desktop has-text-centered">
                   <button class="risk-chip {{ risk.residual_risk.impact|impact_class }}" type="button" aria-label="{% trans 'Impact' as impact_long_name %}">
-                    <span class="chip-head">Schadensausmaß</span>
+                    <span class="chip-head">{% trans "Extent of damage" %}</span>
                     <span class="chip-id">{{ risk.residual_risk.impact }}</span>
                     <span class="chip-label">{{ risk.residual_risk.get_impact_display }}</span>
                   </button>
@@ -130,7 +151,7 @@
                 <!-- Stufe -->
                 <div class="column is-full-mobile is-full-tablet is-half-desktop has-text-centered">
                   <button class="risk-chip {{ risk.residual_risk.level|level_class }}" type="button" aria-label="{% trans 'Level' %}">
-                    <span class="chip-head">Stufe</span>
+                    <span class="chip-head">{% trans "Level" %}</span>
                     <span class="chip-id">{{ risk.residual_risk.level|level_id }}</span>
                     <span class="chip-label">{{ risk.residual_risk.level }}</span>
                   </button>
@@ -139,15 +160,27 @@
                 <!-- Score -->
                 <div class="column is-full-mobile is-full-tablet is-half-desktop has-text-centered" aria-label="{% trans 'Score' %}">
                   <button class="risk-chip {{ risk.residual_risk.score|score_class }}" type="button">
-                    <span class="chip-head">Score</span>
+                    <span class="chip-head">{% trans "Score" %}</span>
                     <span class="chip-id">{{ risk.residual_risk.score }}</span>
                     <span class="chip-label">(max. 20)</span>
                   </button>
                 </div>
               {% else %}
-                <p class="has-text-grey">Noch kein Nettorisiko erfasst.</p>
+                <p class="has-text-grey">{% trans "No net risk recorded yet." %}</p>
+              {% endif %}
+              </div><br>
+              {% if request.user.is_staff or risk.owner_id == request.user.id %}
+                <form method="post" action="{% url 'risks:update_residual_review' risk.id %}">
+                  {% csrf_token %}
+                  <label class="checkbox">
+                    <input type="checkbox" name="review_required" value="on" {% if risk.residual_risk and risk.residual_risk.review_required %}checked{% endif %}>
+                    {% trans "Review required" %}
+                  </label>
+                  <button class="button is-small is-link" style="margin-left:.5rem;">
+                    {% trans "Save" %}
+                  </button>
+                </form>
               {% endif %}
-              </div>
             </div>
           </div> <!-- Ende Nettorisiko -->
 
@@ -158,18 +191,18 @@
   <!-- Maßnahmen -->
   <div class="card">
     <header class="card-header">
-      <p class="card-header-title">Maßnahmen</p>
+      <p class="card-header-title">{% trans "Measures" %}</p>
     </header>
     <div class="card-content">
       {% if risk.controls.exists %}
         <table class="table is-striped is-hoverable is-fullwidth">
           <thead>
             <tr>
-              <th>Titel</th>
+              <th>{% trans "Title" %}</th>
-              <th>Status</th>
+              <th>{% trans "Status" %}</th>
-              <th>Frist</th>
+              <th>{% trans "Deadline" %}</th>
-              <th>Verantwortlicher</th>
+              <th>{% trans "Responsible" %}</th>
-              <th>Link</th>
+              <th>{% trans "Link" %}</th>
             </tr>
           </thead>
           <tbody>
@@ -203,7 +236,7 @@
           </tbody>
         </table>
       {% else %}
-        <p class="has-text-grey">Keine Maßnahmen erfasst.</p>
+        <p class="has-text-grey">{% trans "No measures recorded." %}</p>
       {% endif %}
     </div>
   </div>
@@ -212,16 +245,16 @@
   <!-- Vorfälle -->
   <div class="card">
     <header class="card-header">
-      <p class="card-header-title">Vorfälle</p>
+      <p class="card-header-title">{% trans "Incidents" %}</p>
     </header>
     <div class="card-content">
       {% if risk.incidents.exists %}
         <table class="table is-striped is-fullwidth">
           <thead>
             <tr>
-              <th>Vorfall</th>
+              <th>{% trans "Incident" %}</th>
-              <th>Status</th>
+              <th>{% trans "Status" %}</th>
-              <th>gemeldet am</th>
+              <th>{% trans "Reported on" %}</th>
             </tr>
           </thead>
           <tbody>
@@ -235,7 +268,7 @@
           </tbody>
         </table>
       {% else %}
-        <p class="has-text-grey">Keine Vorfälle bekannt.</p>
+        <p class="has-text-grey">{% trans "No incidents recorded." %}</p>
       {% endif %}
     </div>
   </div> <!-- Ende Vorfälle -->
@@ -243,16 +276,16 @@
   <!-- Historie -->
   <div class="card">
     <header class="card-header">
-      <p class="card-header-title">Historie</p>
+      <p class="card-header-title">{% trans "History" %}</p>
     </header>
     <div class="card-content">
       {% if logs %}
         <table class="table is-striped is-fullwidth">
           <thead>
             <tr>
-              <th>Zeitpunkt</th>
+              <th>{% trans "Time" %}</th>
-              <th>Benutzer</th>
+              <th>{% trans "User" %}</th>
-              <th>Aktion</th>
+              <th>{% trans "Action" %}</th>
             </tr>
           </thead>
           <tbody>
@@ -266,7 +299,7 @@
           </tbody>
         </table>
       {% else %}
-        <p class="has-text-grey">Keine Historie vorhanden.</p>
+        <p class="has-text-grey">{% trans "No History found." %}</p>
       {% endif %}
     </div>
   </div> <!-- Ende Historie -->

templates/risks/list_risks.html

@@ -149,7 +149,7 @@
             </tr>
           {% empty %}
             <tr>
-              <td colspan="8" class="has-text-centered has-text-grey">Keine Risiken vorhanden</td>
+              <td colspan="8" class="has-text-centered has-text-grey">{% trans "No risks present" %}</td>
             </tr>
           {% endfor %}
         </tbody>
@@ -157,5 +157,4 @@
     </div> <!-- Ende Risiken -->
   </div>
 </section>
-
 {% endblock %}

templates/risks/notifications.html

@@ -0,0 +1,57 @@
+{% extends "base.html" %}
+{% load i18n %}
+{% block crumbs %}
+  <li><a href="{% url 'risks:notifications' %}">{% trans "Notifications" %}</a></li>
+{% endblock %}
+{% block content %}
+<section class="section">
+  <div class="container">
+    <div class="level">
+      <div class="level-left">
+        <div class="buttons has-addons">
+          <a class="button {% if filter == 'unread' %}is-link{% endif %}" href="?filter=unread">{% trans "Unread" %}</a>
+          <a class="button {% if filter == 'all' %}is-link{% endif %}" href="?filter=all">{% trans "All" %}</a>
+        </div>
+      </div>
+      <div class="level-right">
+        <form method="post" action="{% url 'risks:notification_mark_all_read' %}">
+          {% csrf_token %}
+          <button class="button is-small is-success" {% if not notifications|length %}disabled{% endif %}>
+            {% trans "Mark all as read" %}
+          </button>
+        </form>
+      </div>
+    </div>
+
+    {% if notifications %}
+      <div class="box">
+        {% for n in notifications %}
+          <article class="media" style="border-bottom:1px solid #eee; padding-bottom:.75rem; margin-bottom:.75rem;">
+            <div class="media-content">
+              <p>
+                {% if not n.read %}
+                  <span class="tag is-warning is-light" style="margin-right:.5rem;">{% trans "New" %}</span>
+                {% endif %}
+                {{ n.message }}
+              </p>
+              <p class="is-size-7 has-text-grey">{{ n.created_at|date:"d.m.Y H:i" }}</p>
+            </div>
+            <div class="media-right">
+              {% if not n.read %}
+                <form method="post" action="{% url 'risks:notification_mark_read' n.pk %}">
+                  {% csrf_token %}
+                  <button class="button is-small is-light" title="{% trans 'Mark as read' %}">
+                    <span class="icon"><i class="fas fa-check"></i></span>
+                  </button>
+                </form>
+              {% endif %}
+            </div>
+          </article>
+        {% endfor %}
+      </div>
+    {% else %}
+      <p class="has-text-grey">{% trans "No notifications." %}</p>
+    {% endif %}
+  </div>
+</section>
+{% endblock %}