guest role; guide section ticking

plugins/geenforce/plugin.py

@@ -106,6 +106,8 @@ class GeEnforcePlugin(BasePlugin):
     def get_permissions(self) -> List:
         """RBAC permissions this plugin owns (edit vs ship are split)."""
         return [
+            ('geenforce.view', 'View imaging PC types and manifests',
+             'geenforce'),
             ('geenforce.manage', 'Edit imaging PC types and manifest drafts',
              'geenforce'),
             ('geenforce.publish', 'Publish, roll back, and export manifests',
@@ -125,6 +127,9 @@ class GeEnforcePlugin(BasePlugin):
                 'icon': 'shield',
                 'route': '/geenforce/manifests',
                 'position': 46,
+                # The READ permission: managing implies it, and it is the one a
+                # site can hand to guests.
+                'permission': ['geenforce.view', 'geenforce.manage'],
                 'section': 'fleet',
             },
         ]