guest role; guide section ticking

plugins/guides/frontend/routes.js

@@ -6,15 +6,20 @@
  * checkboxes are live in exactly one of them.
  *
  * meta.plugin = 'guides' so the ADR-009 router guard redirects when the backend
- * plugin is disabled. Every route requires auth because every guides API route
- * is behind JWT plus a guides.* permission.
+ * plugin is disabled.
+ *
+ * READING does not require auth; WRITING does. The read routes are gated on
+ * guides.view, and a signed-out visitor holds whatever the GUEST role has been
+ * granted - so the role decides, not the router. Sending a guest to /login when
+ * the site has granted them guides.view would make the grant look broken;
+ * letting them through when it has not costs one 401 the view already handles.
  */
 export default [
   {
     path: 'guides',
     name: 'guides',
     component: () => import('./views/GuidesList.vue'),
-    meta: { requiresAuth: true, plugin: 'guides' }
+    meta: { plugin: 'guides' }
   },
   {
     path: 'guides/new',
@@ -26,7 +31,7 @@ export default [
     path: 'guides/:slug',
     name: 'guide-view',
     component: () => import('./views/GuideView.vue'),
-    meta: { requiresAuth: true, plugin: 'guides' }
+    meta: { plugin: 'guides' }
   },
   {
     path: 'guides/:guideid/edit',