/view i en browser for skrivebeskyttet adgang til resultater uden et token-link.",
diff --git a/lang/de.json b/lang/de.json
index aab9bea..ba67c41 100644
--- a/lang/de.json
+++ b/lang/de.json
@@ -766,6 +766,10 @@
"share_create_error": "Link konnte nicht erstellt werden:",
"share_revoke_confirm": "Diesen Link widerrufen? Alle Nutzer verlieren sofort den Zugriff.",
"share_revoke_error": "Widerrufen fehlgeschlagen:",
+ "share_scope_lbl": "Rollenumfang",
+ "share_scope_all": "Alle Rollen",
+ "share_scope_staff": "Mitarbeitende",
+ "share_scope_student": "Schüler",
"viewer_pin_group_title": "Betrachter-PIN",
"viewer_pin_desc": "Eine numerische PIN (4–8 Stellen), die es jedem ermöglicht, /view im Browser zu öffnen und schreibgeschützt auf Ergebnisse zuzugreifen \u2013 ohne Token-Link.",
diff --git a/lang/en.json b/lang/en.json
index 62ed6aa..943bc3b 100644
--- a/lang/en.json
+++ b/lang/en.json
@@ -766,6 +766,10 @@
"share_create_error": "Failed to create link:",
"share_revoke_confirm": "Revoke this link? Anyone using it will immediately lose access.",
"share_revoke_error": "Failed to revoke:",
+ "share_scope_lbl": "Role scope",
+ "share_scope_all": "All roles",
+ "share_scope_staff": "Staff",
+ "share_scope_student": "Students",
"viewer_pin_group_title": "Viewer PIN",
"viewer_pin_desc": "A numeric PIN (4\u20138 digits) that lets anyone open /view in a browser for read-only access to results without a token URL.",
diff --git a/routes/database.py b/routes/database.py
index cbefcaf..3de902c 100644
--- a/routes/database.py
+++ b/routes/database.py
@@ -148,13 +148,19 @@ def db_get_disposition(item_id):
def db_flagged_items():
"""Return flagged items from the most recent completed scan session.
Used by the read-only viewer to load results without an active SSE connection.
+ Respects viewer_scope.role stored in the session for scoped tokens.
"""
if not DB_OK: return jsonify([])
+ from flask import session as _session
+ scope = _session.get("viewer_scope", {})
+ role_filt = scope.get("role", "") if isinstance(scope, dict) else ""
items = _get_db().get_session_items()
# Normalise JSON-encoded columns the same way scan_engine does for SSE cards
import json as _json
out = []
for row in items:
+ if role_filt and row.get("role", "") != role_filt:
+ continue
row["special_category"] = _json.loads(row.get("special_category") or "[]") if isinstance(row.get("special_category"), str) else row.get("special_category", [])
row["exif"] = _json.loads(row.get("exif_json") or "{}") if isinstance(row.get("exif_json"), str) else row.get("exif", {})
row.pop("exif_json", None)
diff --git a/routes/viewer.py b/routes/viewer.py
index e9d6845..c7eaf24 100644
--- a/routes/viewer.py
+++ b/routes/viewer.py
@@ -52,6 +52,7 @@ def list_tokens():
"token_hint": t["token"][:8] + "…",
"token": t["token"],
"label": t.get("label", ""),
+ "scope": t.get("scope", {}),
"created_at": t.get("created_at"),
"expires_at": t.get("expires_at"),
"last_used_at": t.get("last_used_at"),
@@ -73,7 +74,14 @@ def create_token():
return jsonify({"error": "expires_days must be a positive integer"}), 400
except (TypeError, ValueError):
return jsonify({"error": "expires_days must be a positive integer"}), 400
- entry = create_viewer_token(label=label, expires_days=expires_days)
+ raw_scope = body.get("scope", {})
+ if not isinstance(raw_scope, dict):
+ return jsonify({"error": "scope must be an object"}), 400
+ role = str(raw_scope.get("role", "")).strip()
+ if role not in ("", "student", "staff"):
+ return jsonify({"error": "scope.role must be '', 'student', or 'staff'"}), 400
+ scope = {"role": role} if role else {}
+ entry = create_viewer_token(label=label, expires_days=expires_days, scope=scope)
return jsonify(entry), 201
diff --git a/static/js/auth.js b/static/js/auth.js
index 732986c..0768d87 100644
--- a/static/js/auth.js
+++ b/static/js/auth.js
@@ -159,6 +159,12 @@ if (window.VIEWER_MODE) {
document.body.classList.add('viewer-mode');
document.getElementById('authScreen').style.display = 'none';
document.getElementById('scannerScreen').style.display = 'flex';
+ // If this token is role-scoped, lock the filter to that role and hide the dropdown.
+ const _scopeRole = (window.VIEWER_SCOPE || {}).role || '';
+ if (_scopeRole) {
+ const _fr = document.getElementById('filterRole');
+ if (_fr) { _fr.value = _scopeRole; _fr.style.display = 'none'; }
+ }
try { loadTrend(); } catch(e) {}
} else {
(async function() {
diff --git a/static/js/viewer.js b/static/js/viewer.js
index e334bb4..f33cf52 100644
--- a/static/js/viewer.js
+++ b/static/js/viewer.js
@@ -20,6 +20,8 @@ function openShareModal() {
document.getElementById('shareNewLinkRow').style.display = 'none';
document.getElementById('shareLabel').value = '';
document.getElementById('shareExpiry').value = '30';
+ const scopeSel = document.getElementById('shareScope');
+ if (scopeSel) scopeSel.value = '';
_renderTokenList();
fetch('/api/viewer/pin').then(function(r){ return r.json(); }).then(function(d) {
const el = document.getElementById('sharePinStatus');
@@ -51,10 +53,18 @@ async function _renderTokenList() {
: '—';
const row = document.createElement('div');
row.style.cssText = 'display:flex;align-items:center;gap:8px;padding:6px 10px;background:var(--bg);border:1px solid var(--border);border-radius:6px;font-size:12px';
+ const roleVal = tok.scope?.role || '';
+ const roleLbl = roleVal === 'student' ? t('share_scope_student', 'Elever')
+ : roleVal === 'staff' ? t('share_scope_staff', 'Ansatte')
+ : '';
+ const roleBadge = roleLbl
+ ? '' + roleLbl + ''
+ : '';
row.innerHTML =
'