merge from HEAD

Author: Richard Jones

CHANGES.txt

@@ -8,8 +8,10 @@ Fixed:
   errors are visible
 - fix: 'Logout' link was enabled on issue index page only
 - have Permissions only test the check function if itemid is suppled
-- modify index templates to check for row-level Permission
-- more documentation of security mechanisms
+- modify cgi templating system to check item-level permissions in listings
+- enable batching in message and file listings
+- more documentation of security mechanisms (incl. sf patches 1117932,
+  1117860)
 - better unit tests for security mechanisms