Fixed security check for last tab in tabbed_content.

diff --git a/inventory/manage/items.php b/inventory/manage/items.php
index 5ac1f7506bf1c2e8ed6dea79fe3198ec41abe037..86472085096af87271f32e82bc3548a3a5b5befe 100644 (file)
--- a/inventory/manage/items.php
+++ b/inventory/manage/items.php
@@ -591,8 +591,7 @@ $tabs = (get_post('fixed_asset'))
                'reorder_level' => array(_('&Reorder Levels'), (is_inventory_item($stock_id) && 
                        user_check_access('SA_REORDER') ? $stock_id : null)),
                'movement' => array(_('&Transactions'), (user_check_access('SA_ITEMSTRANSVIEW') ? $stock_id : null)),
-               'status' => array(_('&Status'), $stock_id),
-               //'status' => array(_('&Status'), (user_check_access('SA_ITEMSSTATVIEW') ? $stock_id : null)),
+               'status' => array(_('&Status'), (user_check_access('SA_ITEMSSTATVIEW') ? $stock_id : null)),
        );
 
 tabbed_content_start('tabs', $tabs);

diff --git a/js/inserts.js b/js/inserts.js
index e1762dd37b1ba43836d72eb771fa70b16f8a8110..ccc8024c2d2ca1158dfdfb620c9bb02b18c7ae63 100644 (file)
--- a/js/inserts.js
+++ b/js/inserts.js
@@ -469,7 +469,7 @@ var inserts = {
                var tab=ulist[x].getElementsByTagName("button")[0];
                    var url = tab.form.action
                    tab.onclick=function(){
-                   if (!_hotkeys.alt && !tab.disabled)
+                   if (!_hotkeys.alt && !this.disabled)
                                _expand(this);
                        return false;
                    }