From e66165f9fa9e0a6dcf08dddc5176e4a99de1cc5e Mon Sep 17 00:00:00 2001
From: laf <neil@lathwood.co.uk>
Date: Wed, 22 Apr 2015 20:55:43 +0100
Subject: [PATCH] Fixed user perms for inventory dropdown

---
 html/pages/inventory.inc.php | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/html/pages/inventory.inc.php b/html/pages/inventory.inc.php
index dc0a5dad67..e53daab965 100644
--- a/html/pages/inventory.inc.php
+++ b/html/pages/inventory.inc.php
@@ -56,11 +56,13 @@ foreach (dbFetchRows("SELECT `entPhysicalModelName` FROM `entPhysical` GROUP BY
 <?php
 
 foreach (dbFetchRows("SELECT * FROM `devices` ORDER BY `hostname`") as $data) {
-    echo('"<option value=\"'.$data['device_id'].'\""+');
-    if ($data['device_id'] == $_POST['device']) {
-        echo('" selected"+');
+    if (device_permitted($data['device_id'])) {
+        echo('"<option value=\"'.$data['device_id'].'\""+');
+        if ($data['device_id'] == $_POST['device']) {
+            echo('" selected"+');
+        }
+        echo('">'.$data['hostname'].'</option>"+');
     }
-    echo('">'.$data['hostname'].'</option>"+');
 }
 ?>
                  "</select>"+