read permissions on every GET

shopdb/core/api/plugins.py

@@ -6,12 +6,13 @@ from flask_jwt_extended import jwt_required
 from shopdb.utils.responses import success_response, error_response, ErrorCodes
 
 from shopdb.utils.authz import require_role
+from shopdb.utils.authz import require_permission
 
 plugins_bp = Blueprint('plugins', __name__)
 
 
 @plugins_bp.route('', methods=['GET'])
-@jwt_required(optional=True)
+@require_permission('settings.view')
 def list_plugins():
     """List all discovered plugins (enabled or not) with their metadata and
     the framework contract version."""