refac: debt on role backend

features/public_article_read.qa.md

@@ -1,5 +1,7 @@
 # QA procedure: public_article_read
 
+> Superseded in part by roles_permissions_content_scope: the article routes are gated by the content.* permissions of the caller's role (content.create, content.update, content.delete and content.publish; a refusal is 403 "missing_permission" with the header X-Missing-Permission), and content.read decides which drafts show: every draft at all, only the caller's own drafts at own, none otherwise. A draft the caller may not read answers 404 "Article not found", and a role that cannot be resolved is treated as holding no permission.
+
 Package: `test` (black-box, extending `article_test.go`, `verified_account_required_http_test.go`
 and `not_found_errors_test.go`).