Must document A2's requirement that "guest" permission be granted to a user or group before they can view "login required" content

File in apostrophe-permissions/lib/strategiesApi.js Line 46

It should not be necessary to have the guest permission to see objects with loginRequired.

In the boilerplate the guest user doesn´t have any permissions and in the documentation there are no information about this behaviour.

It should be enough to be a logged in user

Start at apostrophe-permissions/lib/strategiesApi.js line 46 and review the linked screenshot and issue description to confirm how loginRequired content is gated. Check the existing documentation and boilerplate permission setup; done means clearly documenting the guest-permission requirement, or recording the confirmed logged-in-user behavior if maintainers decide it should change.

Written by the indexing model from the issue text.