guest role; guide section ticking

plugins/printedparts/api/routes.py

@@ -29,7 +29,6 @@ printedparts_bp = Blueprint('printedparts', __name__)
 
 
 @printedparts_bp.route('/items', methods=['GET'])
-@jwt_required()
 @require_permission('printedparts.view')
 def list_items():
     """List printed items, paginated; search + low-stock filter."""
@@ -56,7 +55,6 @@ def list_items():
 
 
 @printedparts_bp.route('/items/<int:item_id>', methods=['GET'])
-@jwt_required()
 @require_permission('printedparts.view')
 def get_item(item_id: int):
     """Get one printed item with its recent transactions."""
@@ -101,7 +99,6 @@ def _mint_itemcode(item):
 
 
 @printedparts_bp.route('/items', methods=['POST'])
-@jwt_required()
 @require_permission('printedparts.create')
 def create_item():
     """Create a printed item.
@@ -141,7 +138,6 @@ def create_item():
 
 
 @printedparts_bp.route('/items/<int:item_id>', methods=['PUT'])
-@jwt_required()
 @require_permission('printedparts.edit')
 def update_item(item_id: int):
     """Update catalog fields. Quantity moves ONLY through the ledger."""
@@ -174,7 +170,6 @@ def update_item(item_id: int):
 
 
 @printedparts_bp.route('/items/<int:item_id>', methods=['DELETE'])
-@jwt_required()
 @require_permission('printedparts.delete')
 def delete_item(item_id: int):
     """Soft-retire an item; its ledger history stays."""
@@ -188,7 +183,6 @@ def delete_item(item_id: int):
 
 
 @printedparts_bp.route('/items/<int:item_id>/restore', methods=['POST'])
-@jwt_required()
 @require_permission('printedparts.delete')
 def restore_item(item_id: int):
     """Bring a retired item back; code, photo, and history are intact."""
@@ -204,7 +198,6 @@ def restore_item(item_id: int):
 # --- item image: the models.py upload/serve/delete trio ---------------------
 
 @printedparts_bp.route('/items/<int:item_id>/image', methods=['POST'])
-@jwt_required()
 @require_permission('printedparts.edit')
 def upload_item_image(item_id: int):
     """Upload (or replace) the photo for an item (multipart file=<image>)."""
@@ -240,7 +233,6 @@ def serve_item_image(filename):
 
 
 @printedparts_bp.route('/items/<int:item_id>/image', methods=['DELETE'])
-@jwt_required()
 @require_permission('printedparts.delete')
 def delete_item_image(item_id: int):
     """Clear an item image; delete the file only if this plugin owns it."""
@@ -387,7 +379,6 @@ def _alert_team_webhook():
 
 
 @printedparts_bp.route('/items/<int:item_id>/restock', methods=['POST'])
-@jwt_required()
 @require_permission('printedparts.restock')
 def restock_item(item_id: int):
     """Add freshly printed stock. Body: {quantity, badge}."""
@@ -410,7 +401,6 @@ def restock_item(item_id: int):
 
 
 @printedparts_bp.route('/items/<int:item_id>/adjust', methods=['POST'])
-@jwt_required()
 @require_permission('printedparts.restock')
 def adjust_item(item_id: int):
     """Correct the count (damage, recount). Body: {quantitychange, reason, badge}."""
@@ -668,7 +658,6 @@ def _uploader_name():
 
 
 @printedparts_bp.route('/items/<int:item_id>/files', methods=['GET'])
-@jwt_required()
 @require_permission('printedparts.view')
 def list_item_files(item_id: int):
     """Revision history, newest first."""
@@ -678,7 +667,6 @@ def list_item_files(item_id: int):
 
 
 @printedparts_bp.route('/items/<int:item_id>/files', methods=['POST'])
-@jwt_required()
 @require_permission('printedparts.edit')
 def upload_item_file(item_id: int):
     """Upload the next revision of the item's print file.
@@ -747,7 +735,6 @@ def download_item_file(file_id: int):
 
 
 @printedparts_bp.route('/files/<int:file_id>', methods=['DELETE'])
-@jwt_required()
 @require_permission('printedparts.delete')
 def delete_item_file(file_id: int):
     """Remove a bad revision (wrong file uploaded). History otherwise stays."""