guest role; guide section ticking

shopdb/api/__init__.py

@@ -68,7 +68,7 @@ from shopdb.utils.responses import (
 from shopdb.utils.pagination import get_pagination_params, paginate_query
 
 # Authorization decorators for gating plugin write routes
-from shopdb.utils.authz import require_permission, require_role
+from shopdb.utils.authz import require_permission, require_any_permission, require_role
 
 # Service-token authorization for unattended plugin endpoints (collector,
 # GE-Enforce fetch, ...): checks a scoped managed token without exposing token
@@ -298,6 +298,7 @@ __all__ = [
     'paginate_query',
     # Authorization decorators
     'require_permission',
+    'require_any_permission',
     'require_role',
     'service_token_authorized',
     'authorized_service_token',