fix edition of expense report without vat

use access right to validate expense report created for someone else

Conflicts:
	htdocs/comm/action/card.php

generate new pdf when validate billing

Fix #6446 : Event status lost after assign or remouve user 

FIX - use MAIN_FIRSTNAME_NAME_POSITION for select users

expense report.

admin user.

Fix: [Payments] Properly escape variable for JS