Add new 'Reporter' role and corresponding action

src/Turnierplan.App/Client/src/app/i18n/de.ts

@@ -927,12 +927,15 @@ export const de = {
       RoleName: {
         Owner: 'Besitzer',
         Contributor: 'Mitwirkender',
-        Reader: 'Leser'
+        Reader: 'Leser',
+        Reporter: 'Turnierdurchführung'
       },
       RoleDescription: {
         Owner: 'Der Benutzer kann sämtliche Änderungen durchführen inkl. Änderungen an Zugriffsrechten.',
         Contributor: 'Der Benutzer kann sämtliche Änderungen durchführen ausgenommen Änderungen an Zugriffsrechten.',
-        Reader: 'Der Benutzer kann sämtliche Informationen lesen aber keine Änderungen durchführen.'
+        Reader: 'Der Benutzer kann sämtliche Informationen lesen aber keine Änderungen durchführen.',
+        Reporter:
+          'Der Benutzer kann Spielergebnisse melden und löschen sowie Änderungen an der Startgebühr und Priorität der Mannschaften durchführen.'
       },
       PrincipalKind: {
         ApiKey: 'API-Schlüssel',

src/Turnierplan.App/Endpoints/Matches/SetMatchOutcomeEndpoint.cs

@@ -36,7 +36,7 @@ private static async Task<IResult> Handle(
             return Results.NotFound();
         }
 
-        if (!accessValidator.IsActionAllowed(tournament, Actions.GenericWrite))
+        if (!accessValidator.IsActionAllowed(tournament, Actions.TournamentConduct))
         {
             return Results.Forbid();
         }

src/Turnierplan.App/Endpoints/Teams/SetTeamEntryFeePaidEndpoint.cs

@@ -28,7 +28,7 @@ private static async Task<IResult> Handle(
             return Results.NotFound();
         }
 
-        if (!accessValidator.IsActionAllowed(tournament, Actions.GenericWrite))
+        if (!accessValidator.IsActionAllowed(tournament, Actions.TournamentConduct))
         {
             return Results.Forbid();
         }

src/Turnierplan.App/Endpoints/Teams/SetTeamPriorityEndpoint.cs

@@ -28,7 +28,7 @@ private static async Task<IResult> Handle(
             return Results.NotFound();
         }
 
-        if (!accessValidator.IsActionAllowed(tournament, Actions.GenericWrite))
+        if (!accessValidator.IsActionAllowed(tournament, Actions.TournamentConduct))
         {
             return Results.Forbid();
         }

src/Turnierplan.App/Security/Actions.cs

@@ -19,6 +19,11 @@ internal static class Actions
     /// </summary>
     public static readonly Action GenericRead = new(Role.Owner, Role.Contributor, Role.Reader);
 
+    /// <summary>
+    /// Any action that modifies a tournament in a way that is required during "playtime".
+    /// </summary>
+    public static readonly Action TournamentConduct = new(Role.Owner, Role.Contributor, Role.Reporter);
+
     internal sealed class Action(params Role[] requiredRoles)
     {
         public bool IsAllowed(IEnumerable<Role> availableRoles)

src/Turnierplan.Core/RoleAssignment/Role.cs

@@ -21,7 +21,17 @@ public enum Role
     /// <summary>
     /// This role grants the permission to view the target entity but not to make modifications.
     /// </summary>
-    Reader = 1002
+    Reader = 1002,
+
+    #endregion
+
+    #region Tournament Roles
+
+    /// <summary>
+    /// This role grants the permission to perform all actions in a tournament which
+    /// are necessary while the tournament is played.
+    /// </summary>
+    Reporter = 2000
 
     #endregion
 }