Aug 7 - Update: add external inspector

app/routes/facilities.py

@@ -23,7 +23,7 @@ def list_facilities():
         facilities = Facility.query.filter(
             Facility.id.in_(cids), Facility.active == True
         ).order_by(Facility.name).all()
-    elif current_user.role == 'inspector':
+    elif current_user.is_inspector:
         fids = get_inspector_scope(current_user) or []
         facilities = Facility.query.filter(
             Facility.id.in_(fids), Facility.active == True
@@ -262,7 +262,7 @@ def _facility_for_qr_or_403(facility_id):
     if facility is None:
         abort(404)
     # QR management is not an inspector task (matches qr_print_all/qr_export_pdf).
-    if current_user.role == 'inspector':
+    if current_user.is_inspector:
         abort(403)
     if current_user.role == 'customer':
         cids = get_customer_scope(current_user) or []
@@ -329,7 +329,7 @@ def qr_sheet():
     """Bulk print sheet — one labeled QR card per active facility."""
     from app.utils.qr import qr_svg
 
-    if current_user.role == 'inspector':
+    if current_user.is_inspector:
         abort(403)
 
     if current_user.role == 'customer':
@@ -395,7 +395,7 @@ def _area_for_qr_or_403(area_id):
     if area is None:
         abort(404)
     # QR management is not an inspector task (matches qr_print_all/qr_export_pdf).
-    if current_user.role == 'inspector':
+    if current_user.is_inspector:
         abort(403)
     if current_user.role == 'customer':
         cids = get_customer_scope(current_user) or []
@@ -483,7 +483,7 @@ def qr_print_all():
     Inspectors have no QR management (403); customers are scoped to their
     assigned facilities; managers see all active facilities.
     """
-    if current_user.role == 'inspector':
+    if current_user.is_inspector:
         abort(403)
 
     contract_id   = request.args.get('contract_id', type=int)
@@ -552,7 +552,7 @@ def qr_export_pdf():
     Scope is enforced per-id via the same helpers as the QR pages, so a
     customer can never export a code outside their assigned facilities.
     """
-    if current_user.role == 'inspector':
+    if current_user.is_inspector:
         abort(403)
 
     facility_ids = request.form.getlist('facility_ids', type=int)