The previous logic required the Ticket::PERM_ASSIGN permission in order to
open a ticket. This logic requires that perm only if attempting to assign
the ticket on open.

This patch shores up the new list management feature with the custom list
handler feature written to support lists being saved in a table other than
%list_item, namely the built-in ticket status list.

Also squelch the 'You sure?' popup appearing multiple times.

Also fix several javascript errors on ticket edit

Check to make sure staff has perm to assign task in target dept.

This pull request addresses potential XSS vulnerability due to unsanitized
user inputs on field configuration.

Support edit/update of dynamic data

This will allow for self filtering form based on options
Delegate form validation to Form instead of DynamicFormEntry

* Preserve external storage flag on field configuration
* User gridlayout to render task's forms
* Use new roles for task's nav

Credit: Jared Hancock <jared@osticket.com>

This begins with a layout manager for forms which will eventually be
designable via the UI for dynamic forms.

Reset permissions and change primary department and role

orm: Correctly label correlated query joins via sub-queries
orm: Fixup formatting of dates in queries
orm: Fixup mangling of parameter values with colons in sub-queries
misc: Fixup incorrect offset calculation in Misc::dbtime()
forms: search: Add ability to describe a field search
search: Fix crash searching by ticket due date
search: Fix wrong results if searching by a date field (unix epoch was not
    converted to MySQL date format)
search: Fix wrong results searching by date == or !=

Credit: Jared

Allow fields without data to do house-cleaning on deletion.

Support ability to include attachments to FreeTextField.

* Fix search on boolean field

* Fix crash visiting tasks page while ticket adv search
* Fix search on custom fields
* Add search on ticket source
* Move more advanced fields to drop-down

* Log events for AJAX collaborator list edits
* Avoid extra selects for inline image handling
* Avoid using htmLawed to add target="_blank" and class="no-pjax" to links
  in the ticket thread
* Cache instances of IntlDateFormatter; seems expensive to set up
* Cache filetypes Yaml in APC if available
* Cache I18n::getDefaltLanguage() in the request
* Avoid extraneous usage of Model::_inspect and Model::$meta
* Add aggregated query support to the ORM
* Lazily compile SQL query for InstrumentedLists
* Apply `select_related` setting when setting up InstrumentedList instances
* Slight optimization in SqlCompiler::getField
* Avoid double compiling Sql annotations in the ORDER BY clause
* Cache Thread::getEntries
* Break out event types for ThreadEvent for more legible code
* Eliminate one query from Ticket::loadDynamicData
* Fix ticket number bolding if already answered
* Use dependent subqueries for ticket statistics in the queue page, which is
  significantly faster for large data sets (like hundreds of attachments or
  thread entries)
* Fixup sidebar layout on client knowledge base pages

This patch (which needs further development), introduces an extra field to
the %attachment table to store a file's name, in the event that two files
with the same content are stored in the database with differing names. In
such a case, the name is stored in the %attachment table. This allows the
attachment to specify a different name each time the same file is attached
to something in the system.

These fields have been consolidated into the `flags` column.