From 63adfdf6af29bf5dbe5ccbf1162fc27e63bf1e04 Mon Sep 17 00:00:00 2001 From: Janusz Dobrowolski Date: Fri, 27 May 2016 11:19:00 +0200 Subject: [PATCH] Fixed security check for last tab in tabbed_content. --- inventory/manage/items.php | 3 +-- js/inserts.js | 2 +- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/inventory/manage/items.php b/inventory/manage/items.php index 5ac1f750..86472085 100644 --- a/inventory/manage/items.php +++ b/inventory/manage/items.php @@ -591,8 +591,7 @@ $tabs = (get_post('fixed_asset')) 'reorder_level' => array(_('&Reorder Levels'), (is_inventory_item($stock_id) && user_check_access('SA_REORDER') ? $stock_id : null)), 'movement' => array(_('&Transactions'), (user_check_access('SA_ITEMSTRANSVIEW') ? $stock_id : null)), - 'status' => array(_('&Status'), $stock_id), - //'status' => array(_('&Status'), (user_check_access('SA_ITEMSSTATVIEW') ? $stock_id : null)), + 'status' => array(_('&Status'), (user_check_access('SA_ITEMSSTATVIEW') ? $stock_id : null)), ); tabbed_content_start('tabs', $tabs); diff --git a/js/inserts.js b/js/inserts.js index e1762dd3..ccc8024c 100644 --- a/js/inserts.js +++ b/js/inserts.js @@ -469,7 +469,7 @@ var inserts = { var tab=ulist[x].getElementsByTagName("button")[0]; var url = tab.form.action tab.onclick=function(){ - if (!_hotkeys.alt && !tab.disabled) + if (!_hotkeys.alt && !this.disabled) _expand(this); return false; } -- 2.30.2