guest role; guide section ticking

plugins/usb/api/routes.py

@@ -338,7 +338,6 @@ def get_usb_device(device_id):
 
 
 @usb_bp.route('', methods=['POST'])
-@jwt_required()
 @require_permission('usb.create')
 def create_usb_device():
     """Add a device (starts checked-in)."""
@@ -385,7 +384,6 @@ def create_usb_device():
 
 
 @usb_bp.route('/<device_id>', methods=['PUT'])
-@jwt_required()
 @require_permission('usb.edit')
 def update_usb_device(device_id):
     """Edit device_desc / device_owner / locker_location / status."""
@@ -428,7 +426,6 @@ def update_usb_device(device_id):
 
 
 @usb_bp.route('/<device_id>/retire', methods=['POST'])
-@jwt_required()
 @require_permission('usb.edit')
 def retire_usb_device(device_id):
     """Retire a device (status -> retired)."""
@@ -463,7 +460,6 @@ def retire_usb_device(device_id):
 # =============================================================================
 
 @usb_bp.route('/<device_id>/checkout', methods=['POST'])
-@jwt_required()
 @require_permission('usb.create')
 def checkout_device(device_id):
     """Check a device out to a badge."""
@@ -528,7 +524,6 @@ def checkout_device(device_id):
 
 
 @usb_bp.route('/<device_id>/checkin', methods=['POST'])
-@jwt_required()
 @require_permission('usb.create')
 def checkin_device(device_id):
     """Check a device back in from a badge."""
@@ -1111,7 +1106,6 @@ AUDITCOLUMNS = ['timestamp', 'action', 'device_id', 'device_desc', 'badge',
 
 
 @usb_bp.route('/reports/audit', methods=['GET'])
-@jwt_required()
 @require_permission('usb.view')
 def report_audit():
     """Every check-out and check-in in the window, newest first.