diff --git a/web/src/App.jsx b/web/src/App.jsx
index 5a2c7ad..fa6a7d5 100644
--- a/web/src/App.jsx
+++ b/web/src/App.jsx
@@ -75,17 +75,20 @@ function Sidebar() {
         <NavItem to="/checkin" icon="checkin" label="Einlagern" />
         <NavItem to="/checkout" icon="checkout" label="Auslagern" />
         <NavItem to="/products" icon="package" label="Produkte" />
-        <NavItem to="/groups" icon="tag" label="Gruppen" />
-        <NavItem to="/categories" icon="package" label="Kategorien" />
         <NavItem to="/shopping" icon="cart" label="Einkaufsliste" />
         <NavItem to="/history" icon="history" label="Verlauf" />
         {isAdmin && (
           <>
-            <div className="nav-section">Verwaltung</div>
+            {/* Stammdaten strukturieren den Katalog und werden nur von Admins
+                gepflegt – deshalb alle zusammen hier, wie in der iOS-App. */}
+            <div className="nav-section">Stammdaten</div>
+            <NavItem to="/categories" icon="package" label="Kategorien" />
+            <NavItem to="/groups" icon="tag" label="Gruppen" />
             <NavItem to="/locations" icon="location" label="Lagerorte" />
             <NavItem to="/shops" icon="cart" label="Shops" />
             <NavItem to="/units" icon="box" label="Einheiten" />
             <NavItem to="/package-types" icon="package" label="Gebinde" />
+            <div className="nav-section">System</div>
             <NavItem to="/users" icon="users" label="Benutzer" />
             <NavItem to="/transfer" icon="history" label="Import / Export" />
             <NavItem to="/settings" icon="settings" label="Einstellungen" />
@@ -138,8 +141,8 @@ export default function App() {
       <Route path="/products/:id" element={<Protected><ProductForm /></Protected>} />
       <Route path="/i/:uid" element={<Protected><ItemResolve /></Protected>} />
       <Route path="/l/:id" element={<Protected><LocationResolve /></Protected>} />
-      <Route path="/groups" element={<Protected><Groups /></Protected>} />
-      <Route path="/categories" element={<Protected><Categories /></Protected>} />
+      <Route path="/groups" element={<Protected adminOnly><Groups /></Protected>} />
+      <Route path="/categories" element={<Protected adminOnly><Categories /></Protected>} />
       <Route path="/shopping" element={<Protected><ShoppingList /></Protected>} />
       <Route path="/history" element={<Protected><History /></Protected>} />
       <Route path="/shops" element={<Protected adminOnly><Shops /></Protected>} />