diff --git a/adhocracy-plus/config/settings/base.py b/adhocracy-plus/config/settings/base.py
index 3ec17682f..9ba86c72d 100644
--- a/adhocracy-plus/config/settings/base.py
+++ b/adhocracy-plus/config/settings/base.py
@@ -16,6 +16,7 @@
 
 # Link to a dokuwiki instance containing a manual for aplus
 # Leave blank to disable
+# For guest users this is hardcoded in indicator.html
 APLUS_MANUAL_URL = ""
 
 # Application definition
@@ -42,6 +43,7 @@
     "allauth",
     "allauth.account",
     "allauth.socialaccount",
+    "guest_user",
     "rules.apps.AutodiscoverRulesConfig",
     "easy_thumbnails",
     "parler",
@@ -280,6 +282,7 @@
     "rules.permissions.ObjectPermissionBackend",
     "django.contrib.auth.backends.ModelBackend",
     "allauth.account.auth_backends.AuthenticationBackend",
+    "guest_user.backends.GuestBackend",
 )
 
 ACCOUNT_ADAPTER = "apps.users.adapters.AccountAdapter"
@@ -719,3 +722,13 @@
         },
     },
 }
+
+GUEST_USER = {
+    "NAME_GENERATOR": "guest_user.functions.generate_uuid_username",
+}
+
+
+GUEST_USER_REQUIRED_ANON_URL = "/accounts/guests/login"
+# Redirects below when guest user is required but currently regular user.
+# Currently only guest dashboard views use this, so redirects to user profile.
+GUEST_USER_REQUIRED_USER_URL = "/account/profile/"
diff --git a/apps/account/views.py b/apps/account/views.py
index ae6f66232..40b3fc0a5 100644
--- a/apps/account/views.py
+++ b/apps/account/views.py
@@ -12,18 +12,20 @@
 from apps.users.models import User
 from apps.users.utils import set_session_language
 
+from guest_user.functions import is_guest_user
+from guest_user.mixins import GuestUserRequiredMixin, RegularUserRequiredMixin
+
 from . import forms
 from .emails import AccountDeletionEmail
 
 
-class AccountView(RedirectView):
+class AccountView(RegularUserRequiredMixin, RedirectView):
     permanent = False
     pattern_name = "account_profile"
     # Placeholder View to be replaced if we want to use a custom account
     # dashboard function overview.
 
-
-class ProfileUpdateView(LoginRequiredMixin, SuccessMessageMixin, generic.UpdateView):
+class ProfileUpdateView(LoginRequiredMixin, SuccessMessageMixin, RegularUserRequiredMixin, generic.UpdateView):
     model = User
     template_name = "a4_candy_account/profile.html"
     form_class = forms.ProfileForm
diff --git a/apps/augmentedreality/api.py b/apps/augmentedreality/api.py
index 584621357..a1401e3e4 100644
--- a/apps/augmentedreality/api.py
+++ b/apps/augmentedreality/api.py
@@ -1,7 +1,14 @@
+from guest_user.mixins import AllowGuestUserMixin
+
 from adhocracy4.comments_async.api import CommentViewSet
+from adhocracy4.ratings.api import RatingViewSet
+
+
+class CombinedRatingViewSet(AllowGuestUserMixin, RatingViewSet):
+    http_method_names = ["post", "patch"]
 
 
-class CombinedCommentViewSet(CommentViewSet):
+class CombinedCommentViewSet(AllowGuestUserMixin, CommentViewSet):
     def get_queryset(self):
         comments = super().get_queryset()
         return comments
diff --git a/apps/augmentedreality/migrations/0005_alter_scene_content_type.py b/apps/augmentedreality/migrations/0005_alter_scene_content_type.py
new file mode 100644
index 000000000..5e40bdbef
--- /dev/null
+++ b/apps/augmentedreality/migrations/0005_alter_scene_content_type.py
@@ -0,0 +1,24 @@
+# Generated by Django 4.2.18 on 2025-07-01 15:42
+
+from django.db import migrations, models
+import django.db.models.deletion
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("contenttypes", "0002_remove_content_type_name"),
+        ("arpas_augmentedreality", "0004_alter_arobject_scene"),
+    ]
+
+    operations = [
+        migrations.AlterField(
+            model_name="scene",
+            name="content_type",
+            field=models.ForeignKey(
+                on_delete=django.db.models.deletion.CASCADE,
+                related_name="scenes",
+                to="contenttypes.contenttype",
+            ),
+        ),
+    ]
diff --git a/apps/augmentedreality/models.py b/apps/augmentedreality/models.py
index 521decaa9..0fa8c9444 100644
--- a/apps/augmentedreality/models.py
+++ b/apps/augmentedreality/models.py
@@ -25,7 +25,9 @@ def validate_item_content_type(content_type):
 
 
 class Scene(models.Model):
-    content_type = models.ForeignKey(ContentType, on_delete=models.CASCADE)
+    content_type = models.ForeignKey(
+        ContentType, on_delete=models.CASCADE, related_name="scenes"
+    )
     object_id = models.PositiveIntegerField()
     item = GenericForeignKey("content_type", "object_id")
 
diff --git a/apps/augmentedreality/urls.py b/apps/augmentedreality/urls.py
index b241ab5e9..bc7a83439 100644
--- a/apps/augmentedreality/urls.py
+++ b/apps/augmentedreality/urls.py
@@ -1,8 +1,10 @@
 from adhocracy4.api import routers as a4routers
 
 from .api import CombinedCommentViewSet
+from .api import CombinedRatingViewSet
 
 ct_router = a4routers.ContentTypeDefaultRouter()
-ct_router.register(r"arpas_comments", CombinedCommentViewSet, basename="arpas_comments")
+ct_router.register(r"arpas-comments", CombinedCommentViewSet, basename="arpas-comments")
+ct_router.register(r"arpas-ratings", CombinedRatingViewSet, basename="arpas-ratings")
 
 urlpatterns = ct_router.urls
diff --git a/apps/userdashboard/views.py b/apps/userdashboard/views.py
index 7a287402f..60bccd13e 100644
--- a/apps/userdashboard/views.py
+++ b/apps/userdashboard/views.py
@@ -3,6 +3,7 @@
 from django.shortcuts import get_object_or_404
 from django.urls import reverse
 from django.views import generic
+from guest_user.mixins import RegularUserRequiredMixin
 
 from adhocracy4.actions.models import Action
 from adhocracy4.comments.models import Comment
@@ -18,6 +19,7 @@
 
 class UserDashboardBaseMixin(
     LoginRequiredMixin,
+    RegularUserRequiredMixin,
     generic.base.ContextMixin,
     generic.base.TemplateResponseMixin,
     generic.base.View,
diff --git a/apps/users/models.py b/apps/users/models.py
index 1cb0959b9..a23d003b9 100644
--- a/apps/users/models.py
+++ b/apps/users/models.py
@@ -126,6 +126,7 @@ class User(auth_models.AbstractBaseUser, auth_models.PermissionsMixin):
     objects = auth_models.UserManager()
 
     USERNAME_FIELD = "username"
+    PASSWORD_FIELD = "username"  # for django-guest-user
     REQUIRED_FIELDS = ["email"]
 
     def get_projects_follow_list(self, exclude_private_projects=False):
diff --git a/apps/users/templates/a4_candy_users/indicator.html b/apps/users/templates/a4_candy_users/indicator.html
index 7bf6a34c2..26b8d5a4f 100644
--- a/apps/users/templates/a4_candy_users/indicator.html
+++ b/apps/users/templates/a4_candy_users/indicator.html
@@ -1,65 +1,77 @@
-{% load i18n static thumbnail settings %}
+{% load i18n static thumbnail settings guest_user %}
 {% if request.user.is_authenticated %}
-    <div class="dropdown userindicator__dropdown">
-        <button title="{% translate 'Menu' %}"
-                class="d-md-none dropdown-toggle btn btn--secondary-filled  btn--attached-top header-upper__mobile-toggle"
-                data-bs-toggle="dropdown"
-                data-flip="false"
-                aria-haspopup="true"
-                aria-expanded="false"
-                id="user-actions-mobile">
-            <span class="d-none d-sm-inline-block pe-1">{% translate 'Menu' %}</span>
-        </button>
-        <button title="{% translate 'Menu' %}"
-                class="d-none d-md-inline-block dropdown-toggle btn btn--secondary-filled btn--attached-top  btn--align-left header-upper__toggle"
-                data-bs-toggle="dropdown"
-                data-flip="false"
-                aria-haspopup="true"
-                aria-expanded="false"
-                id="user-actions">
-            <div class="userindicator__btn-img"
-                 style="background-image: {% if request.user.avatar %} url({{ request.user.avatar|thumbnail_url:'avatar' }}) {% else %}  url({{ request.user.avatar_fallback }}) {% endif %}">
+    {% with is_guest=user|is_guest_user %}
+        <div class="dropdown userindicator__dropdown">
+            <button title="{% translate 'Menu' %}"
+                    class="d-md-none dropdown-toggle btn btn--secondary-filled  btn--attached-top header-upper__mobile-toggle"
+                    data-bs-toggle="dropdown"
+                    data-flip="false"
+                    aria-haspopup="true"
+                    aria-expanded="false"
+                    id="user-actions-mobile">
+                <span class="d-none d-sm-inline-block pe-1">{% translate 'Menu' %}</span>
+            </button>
+            <button title="{% translate 'Menu' %}"
+                    class="d-none d-md-inline-block dropdown-toggle btn btn--secondary-filled btn--attached-top  btn--align-left header-upper__toggle"
+                    data-bs-toggle="dropdown"
+                    data-flip="false"
+                    aria-haspopup="true"
+                    aria-expanded="false"
+                    id="user-actions">
+                {% if not is_guest %}
+                    <div class="userindicator__btn-img"
+                        style="background-image: {% if request.user.avatar %} url({{ request.user.avatar|thumbnail_url:'avatar' }}) {% else %}  url({{ request.user.avatar_fallback }}) {% endif %}">
+                    </div>
+                {% endif %}
+                <div class="userindicator__btn-text text-start">
+                    <span class="userindicator__hello">{% translate "Hello" %}, </span>
+                    {% if not is_guest %}
+                        <br>
+                        <div class="u-overflow-ellipsis">{{ request.user.username }}</div>
+                    {% else %}
+                        <span>{% translate "Guest" %}</span>
+                    {% endif %}
+                </div>
+                <i class="fa fa-chevron-down" aria-hidden="true"></i>
+            </button>
+            <div class="dropdown-menu dropdown-menu-end userindicator__dropdown-menu"
+                aria-labelledby="user-actions user-actions-mobile">
+                {% if request.user.is_superuser %}
+                    <a class="dropdown-item" href="{% url 'admin:index' %}">{% translate "Admin" %}</a>
+                {% endif %}
+                {% if not is_guest %}
+                    <a class="dropdown-item" href="{% url 'userdashboard-overview' %}">{% translate 'My Overview' %}</a>
+                    <a class="dropdown-item" href="{% url 'account' %}">{% translate "Account Settings" %}</a>
+                    {% for organisation in request.user.organisations %}
+                        <a class="dropdown-item"
+                        href="{% url 'a4dashboard:project-list' organisation_slug=organisation.slug %}">
+                            {{ organisation.name }}
+                        </a>
+                    {% endfor %}
+                    {% settings_value "APLUS_MANUAL_URL" as manual_url %}
+                    {% if manual_url %}
+                        <a class="dropdown-item"
+                        href="{{ manual_url }}/{{ LANGUAGE_CODE }}:start"
+                        target="_blank">{% translate 'Help' %}</a>
+                    {% endif %}
+                {% else %} 
+                    <a class="dropdown-item" href="https://manual.adhocracy.plus/de:start" target="_blank">{% translate "Help" %}</a>
+                {% endif %}
+                <form class="form--inline"
+                    action="{% url 'account_logout' %}"
+                    method="post"
+                    aria-label="{% translate 'Logout' %}">
+                    {% csrf_token %}
+                    <input type="hidden" name="next" value="{{ redirect_field_value }}">
+                    <button type="submit" class="dropdown-item">{% translate "Logout" %}</button>
+                </form>
             </div>
-            <div class="userindicator__btn-text text-start">
-                <span class="userindicator__hello">{% translate "Hello" %}</span>
-                <br>
-                <div class="u-overflow-ellipsis">{{ request.user.username }}</div>
+    {% endwith %}
+        {% else %}
+            <div class="btn btn--secondary-filled btn--huge btn--attached-top">
+                <span class="navi__item"><a href="{% url 'account_login' %}?next={{ redirect_field_value }}">{% translate "Login" %}</a></span>
+                <span class="d-none d-md-inline">/</span>
+                <span class="navi__item"><a href="{% url 'account_signup' %}?next={{ redirect_field_value }}">{% translate "Register" %}</a></span>
             </div>
-            <i class="fa fa-chevron-down" aria-hidden="true"></i>
-        </button>
-        <div class="dropdown-menu dropdown-menu-end userindicator__dropdown-menu"
-             aria-labelledby="user-actions user-actions-mobile">
-            {% if request.user.is_superuser %}
-                <a class="dropdown-item" href="{% url 'admin:index' %}">{% translate "Admin" %}</a>
-            {% endif %}
-            <a class="dropdown-item" href="{% url 'userdashboard-overview' %}">{% translate 'My Overview' %}</a>
-            <a class="dropdown-item" href="{% url 'account' %}">{% translate "Account Settings" %}</a>
-            {% for organisation in request.user.organisations %}
-                <a class="dropdown-item"
-                   href="{% url 'a4dashboard:project-list' organisation_slug=organisation.slug %}">
-                    {{ organisation.name }}
-                </a>
-            {% endfor %}
-            {% settings_value "APLUS_MANUAL_URL" as manual_url %}
-            {% if manual_url %}
-                <a class="dropdown-item"
-                   href="{{ manual_url }}/{{ LANGUAGE_CODE }}:start"
-                   target="_blank">{% translate 'Help' %}</a>
-            {% endif %}
-            <form class="form--inline"
-                  action="{% url 'account_logout' %}"
-                  method="post"
-                  aria-label="{% translate 'Logout' %}">
-                {% csrf_token %}
-                <input type="hidden" name="next" value="{{ redirect_field_value }}">
-                <button type="submit" class="dropdown-item">{% translate "Logout" %}</button>
-            </form>
         </div>
-    {% else %}
-        <div class="btn btn--secondary-filled btn--huge btn--attached-top">
-            <span class="navi__item"><a href="{% url 'account_login' %}?next={{ redirect_field_value }}">{% translate "Login" %}</a></span>
-            <span class="d-none d-md-inline">/</span>
-            <span class="navi__item"><a href="{% url 'account_signup' %}?next={{ redirect_field_value }}">{% translate "Register" %}</a></span>
-        </div>
-    </div>
 {% endif %}
diff --git a/changelog/490.md b/changelog/490.md
new file mode 100644
index 000000000..0603d27d9
--- /dev/null
+++ b/changelog/490.md
@@ -0,0 +1,8 @@
+### Added
+
+- unauthenticated users can add comments and ratings and a guest user will be created for them
+- deps: django-guest-user (liqd fork)
+
+### Changed
+
+- deps: a4 branch-off for AR comment labeling
diff --git a/changelog/526.md b/changelog/526.md
index e2f331f9a..17aa87541 100644
--- a/changelog/526.md
+++ b/changelog/526.md
@@ -1,12 +1,8 @@
 ### Added
 - New Api Endpoint for the ARC Part of this Project
+- Passing Variant Content Type to ARC App
+- Adding propertys to Variant so it works with Comments and Ratings
 
 ### Changed 
 - Comments and Variants on Desktop are bound to Variant instead of Topics
 
-### Added
-- Passing Variant Content Type to ARC App
-
-### Added
-- Adding propertys to Variant so it works with Comments and Ratings
-
diff --git a/package-lock.json b/package-lock.json
index 08930e706..3d356ee9d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15,7 +15,7 @@
         "@react-three/drei": "^9",
         "@react-three/fiber": "^8",
         "@react-three/xr": "^6",
-        "adhocracy4": "git+https://github.com/liqd/adhocracy4#82fb1ef56b03d51b8bb9d1b2edddcb5f75a96344",
+        "adhocracy4": "git+https://github.com/liqd/adhocracy4#e7b8d74dd755497b24ef575c649939e21b69040c",
         "arpas-arc": "git+https://github.com/liqd/arpas-arc#6774661ef34b4f65bcb38fc4da8fedeef01b5caf",
         "autoprefixer": "10.4.20",
         "bootstrap": "5.2.3",
@@ -3819,25 +3819,6 @@
         "@parcel/watcher-win32-x64": "2.5.1"
       }
     },
-    "node_modules/@parcel/watcher-android-arm64": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-android-arm64/-/watcher-android-arm64-2.5.1.tgz",
-      "integrity": "sha512-KF8+j9nNbUN8vzOFDpRMsaKBHZ/mcjEjMToVMJOhTozkDonQFFrRcfdLWn6yWKCmJKmdVxSgHiYvTCef4/qcBA==",
-      "cpu": [
-        "arm64"
-      ],
-      "optional": true,
-      "os": [
-        "android"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
     "node_modules/@parcel/watcher-darwin-arm64": {
       "version": "2.5.1",
       "resolved": "https://registry.npmjs.org/@parcel/watcher-darwin-arm64/-/watcher-darwin-arm64-2.5.1.tgz",
@@ -3857,215 +3838,6 @@
         "url": "https://opencollective.com/parcel"
       }
     },
-    "node_modules/@parcel/watcher-darwin-x64": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-darwin-x64/-/watcher-darwin-x64-2.5.1.tgz",
-      "integrity": "sha512-1ZXDthrnNmwv10A0/3AJNZ9JGlzrF82i3gNQcWOzd7nJ8aj+ILyW1MTxVk35Db0u91oD5Nlk9MBiujMlwmeXZg==",
-      "cpu": [
-        "x64"
-      ],
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
-    "node_modules/@parcel/watcher-freebsd-x64": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-freebsd-x64/-/watcher-freebsd-x64-2.5.1.tgz",
-      "integrity": "sha512-SI4eljM7Flp9yPuKi8W0ird8TI/JK6CSxju3NojVI6BjHsTyK7zxA9urjVjEKJ5MBYC+bLmMcbAWlZ+rFkLpJQ==",
-      "cpu": [
-        "x64"
-      ],
-      "optional": true,
-      "os": [
-        "freebsd"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
-    "node_modules/@parcel/watcher-linux-arm-glibc": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-linux-arm-glibc/-/watcher-linux-arm-glibc-2.5.1.tgz",
-      "integrity": "sha512-RCdZlEyTs8geyBkkcnPWvtXLY44BCeZKmGYRtSgtwwnHR4dxfHRG3gR99XdMEdQ7KeiDdasJwwvNSF5jKtDwdA==",
-      "cpu": [
-        "arm"
-      ],
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
-    "node_modules/@parcel/watcher-linux-arm-musl": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-linux-arm-musl/-/watcher-linux-arm-musl-2.5.1.tgz",
-      "integrity": "sha512-6E+m/Mm1t1yhB8X412stiKFG3XykmgdIOqhjWj+VL8oHkKABfu/gjFj8DvLrYVHSBNC+/u5PeNrujiSQ1zwd1Q==",
-      "cpu": [
-        "arm"
-      ],
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
-    "node_modules/@parcel/watcher-linux-arm64-glibc": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-linux-arm64-glibc/-/watcher-linux-arm64-glibc-2.5.1.tgz",
-      "integrity": "sha512-LrGp+f02yU3BN9A+DGuY3v3bmnFUggAITBGriZHUREfNEzZh/GO06FF5u2kx8x+GBEUYfyTGamol4j3m9ANe8w==",
-      "cpu": [
-        "arm64"
-      ],
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
-    "node_modules/@parcel/watcher-linux-arm64-musl": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-linux-arm64-musl/-/watcher-linux-arm64-musl-2.5.1.tgz",
-      "integrity": "sha512-cFOjABi92pMYRXS7AcQv9/M1YuKRw8SZniCDw0ssQb/noPkRzA+HBDkwmyOJYp5wXcsTrhxO0zq1U11cK9jsFg==",
-      "cpu": [
-        "arm64"
-      ],
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
-    "node_modules/@parcel/watcher-linux-x64-glibc": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-linux-x64-glibc/-/watcher-linux-x64-glibc-2.5.1.tgz",
-      "integrity": "sha512-GcESn8NZySmfwlTsIur+49yDqSny2IhPeZfXunQi48DMugKeZ7uy1FX83pO0X22sHntJ4Ub+9k34XQCX+oHt2A==",
-      "cpu": [
-        "x64"
-      ],
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
-    "node_modules/@parcel/watcher-linux-x64-musl": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-linux-x64-musl/-/watcher-linux-x64-musl-2.5.1.tgz",
-      "integrity": "sha512-n0E2EQbatQ3bXhcH2D1XIAANAcTZkQICBPVaxMeaCVBtOpBZpWJuf7LwyWPSBDITb7In8mqQgJ7gH8CILCURXg==",
-      "cpu": [
-        "x64"
-      ],
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
-    "node_modules/@parcel/watcher-win32-arm64": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-win32-arm64/-/watcher-win32-arm64-2.5.1.tgz",
-      "integrity": "sha512-RFzklRvmc3PkjKjry3hLF9wD7ppR4AKcWNzH7kXR7GUe0Igb3Nz8fyPwtZCSquGrhU5HhUNDr/mKBqj7tqA2Vw==",
-      "cpu": [
-        "arm64"
-      ],
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
-    "node_modules/@parcel/watcher-win32-ia32": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-win32-ia32/-/watcher-win32-ia32-2.5.1.tgz",
-      "integrity": "sha512-c2KkcVN+NJmuA7CGlaGD1qJh1cLfDnQsHjE89E60vUEMlqduHGCdCLJCID5geFVM0dOtA3ZiIO8BoEQmzQVfpQ==",
-      "cpu": [
-        "ia32"
-      ],
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
-    "node_modules/@parcel/watcher-win32-x64": {
-      "version": "2.5.1",
-      "resolved": "https://registry.npmjs.org/@parcel/watcher-win32-x64/-/watcher-win32-x64-2.5.1.tgz",
-      "integrity": "sha512-9lHBdJITeNR++EvSQVUcaZoWupyHfXe1jZvGZ06O/5MflPcuPLtEphScIBL+AiCWBO46tDSHzWyD0uDmmZqsgA==",
-      "cpu": [
-        "x64"
-      ],
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">= 10.0.0"
-      },
-      "funding": {
-        "type": "opencollective",
-        "url": "https://opencollective.com/parcel"
-      }
-    },
     "node_modules/@pmndrs/handle": {
       "version": "6.6.17",
       "resolved": "https://registry.npmjs.org/@pmndrs/handle/-/handle-6.6.17.tgz",
@@ -4413,18 +4185,6 @@
         "darwin"
       ]
     },
-    "node_modules/@rollup/rollup-linux-x64-gnu": {
-      "version": "4.41.0",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.41.0.tgz",
-      "integrity": "sha512-XMLeKjyH8NsEDCRptf6LO8lJk23o9wvB+dJwcXMaH6ZQbbkHu2dbGIUindbMtRN6ux1xKi16iXWu6q9mu7gDhQ==",
-      "cpu": [
-        "x64"
-      ],
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
     "node_modules/@sinclair/typebox": {
       "version": "0.27.8",
       "resolved": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.27.8.tgz",
@@ -7950,8 +7710,8 @@
     },
     "node_modules/adhocracy4": {
       "version": "1.0.0",
-      "resolved": "git+ssh://git@github.com/liqd/adhocracy4.git#82fb1ef56b03d51b8bb9d1b2edddcb5f75a96344",
-      "integrity": "sha512-L7pMOEtwkJzc/lkVKhyk69llqRy9Ii/6RzZCd3/SyBnlkkOtVuBjoLWr9bWK6ls8YU/x8mrXlBigCtcmFOV/Pg==",
+      "resolved": "git+ssh://git@github.com/liqd/adhocracy4.git#e7b8d74dd755497b24ef575c649939e21b69040c",
+      "integrity": "sha512-NULRrUjUDOiUvvmLLafht4Ccr9jd9ZO/0loTv3F1qu9PxYIZJRzDLSDj0IsRgyGHSqKq8FF1CT2BQOvK1dKHEg==",
       "license": "AGPL-3.0+",
       "dependencies": {
         "@popperjs/core": "2.11.8",
diff --git a/package.json b/package.json
index cbf418004..40d056611 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
     "@react-three/drei": "^9",
     "@react-three/fiber": "^8",
     "@react-three/xr": "^6",
-    "adhocracy4": "git+https://github.com/liqd/adhocracy4#82fb1ef56b03d51b8bb9d1b2edddcb5f75a96344",
+    "adhocracy4": "git+https://github.com/liqd/adhocracy4#e7b8d74dd755497b24ef575c649939e21b69040c",
     "arpas-arc": "git+https://github.com/liqd/arpas-arc#6774661ef34b4f65bcb38fc4da8fedeef01b5caf",
     "autoprefixer": "10.4.20",
     "bootstrap": "5.2.3",
@@ -121,4 +121,4 @@
       "make lint-python-files"
     ]
   }
-}
+}
\ No newline at end of file
diff --git a/requirements/base.txt b/requirements/base.txt
index 2033068c2..66323a9ff 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -1,10 +1,11 @@
 # A4
-git+https://github.com/liqd/adhocracy4.git@82fb1ef56b03d51b8bb9d1b2edddcb5f75a96344#egg=adhocracy4
+git+https://github.com/liqd/adhocracy4.git@e7b8d74dd755497b24ef575c649939e21b69040c#egg=adhocracy4
 
 # Additional requirements
 brotli==1.1.0
 django-cloudflare-push==0.2.2
 django_csp==3.8
+django-guest-user @ git+https://github.com/liqd/django-guest-user.git
 djangorestframework-gis==1.1.0
 django-parler==2.3
 djangorestframework-simplejwt==5.3.1
diff --git a/tests/augmentedreality/test_ar_topicprio.py b/tests/augmentedreality/test_ar_topicprio.py
new file mode 100644
index 000000000..d55cfb3ca
--- /dev/null
+++ b/tests/augmentedreality/test_ar_topicprio.py
@@ -0,0 +1,43 @@
+import pytest
+from django.contrib.contenttypes.models import ContentType
+
+from apps.augmentedreality.api import CombinedCommentViewSet
+from apps.augmentedreality.models import ARObject
+from apps.augmentedreality.models import Scene
+from apps.augmentedreality.models import Variant
+from apps.topicprio.models import Topic
+from tests.topicprio.factories import TopicFactory
+
+
+@pytest.mark.django_db
+def test_comment_creation_with_valid_content_type(apiclient, admin):
+    from rest_framework.permissions import AllowAny
+
+    """
+    AllowAny permissions gets around an auth issue in test, likely from
+    AllowGuestUser mixin not being engaged in correct order.
+    """
+    original_permissions = CombinedCommentViewSet.permission_classes
+    CombinedCommentViewSet.permission_classes = [AllowAny]
+
+    try:
+        # Create topic, scene, ARObject needed for variant, which comment is bound to
+        topic = TopicFactory()
+        content_type = ContentType.objects.get_for_model(Topic)
+        scene = Scene.objects.create(content_type=content_type, object_id=topic.id)
+        ar_object = ARObject.objects.create(scene=scene)
+        variant = Variant.objects.create(ar_object=ar_object, name="Test Variant")
+        variant_content_type = ContentType.objects.get_for_model(Variant)
+
+        url = f"/api/contenttypes/{variant_content_type.id}/objects/{variant.id}/arpas-comments/"
+        response = apiclient.post(
+            url, {"comment": "Test comment", "agreed_terms_of_use": True}, format="json"
+        )
+
+        assert response.status_code == 201
+        assert response.data["comment"] == "Test comment"
+        assert response.data["user_name"] == "AR comment"
+
+    finally:
+        # Reset permissions
+        CombinedCommentViewSet.permission_classes = original_permissions