Abstract: A system and related methods for running an application in an extended browser session with a limited scope of access is disclosed. The system is programmed to determine the scope of access to an ontology for an application generating a graphical output as a webpage in a kiosk mode, where the ontology has object types and link types instantiated from underlying datasets. The scope of access depends on the user account running the application and excludes operations leading to writebacks to the underlying datasets. The system is programmed to continuously supply a limited-scope token with a future expiration date that represents currently determined scope of access, which is to be used as a cookie for the application. For each Web request that includes such a cookie for access to the ontology, the system is programmed to allow access according to the scope of access represented by the cookie.