Bug 455583 - Bugzilla::User::can_{set,request}_flag methods should use the respective {grant,request}_group_id values instead of loading new Group object
Patch by David Lawrence <dkl@redhat.com> - r/a=LpSolit

Bug 339437: Make flag requestee a select box and limit users to requestable only - Patch by Seth <laoseth@gmail.com> r/a=LpSolit

Bug 343809: Merge FlagType::validate() with Flag::validate() - Patch by Frédéric Buclin <LpSolit@gmail.com> a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk

Bug 347360: Incorrect field name in FlagType.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> a=myk

Bug 343810: Remove Bugzilla::FlagType::get() and implement real flagtype objects - Patch by Frédéric Buclin <LpSolit@gmail.com> a=myk

Bug 345032: Tainted value in request.cgi when restricting the search to a given flag - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=myk

Bug 232705: FlagType::normalize() not used; remove it - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=myk

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, a=justdave

Bug 340116: Flag::FormToNewFlags() uses incorrect data - Patch by Frédéric Buclin <LpSolit@gmail.com> r=kiko a=myk

Bug 300549: Eliminate deprecated Bugzilla::DB routines from Flag.pm and FlagType.pm - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wicked a=justdave

Bug 332521: Remove GroupIdToName() from globals.pl - Patch by Frédéric Buclin <LpSolit@gmail.com> r=mkanat a=myk

Bug 322285: Cancelling a flag should remove it completely from the DB - Patch by Frédéric Buclin <LpSolit@gmail.com> r/a=myk

Bug 302936: Reject the requestee if he cannot access private attachments - Patch by Frédéric Buclin <LpSolit@gmail.com> r=jouni a=justdave

Fix for bug 305773: fixes regression in flag validation code that let through untrusted requestees when multiple requestees were entered into a requestee field (per the new feature that lets multiple requestees be entered into those fields); r=lpsolit

Bug 301967: Some .pm files have invalid POD syntax - Patch by Frédéric Buclin <LpSolit@gmail.com> r=wurblzap a=justdave

Bug 293159: [SECURITY] Anyone can change flags and access bug summaries due to a bad check in Flag::validate() and Flag::modify()
Patch By Frederic Buclin <LpSolit@gmail.com> r=myk, a=justdave

Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=LpSolit, r=joel, a=justdave

Bug 291539: Flags get duplicated if multiple inclusions apply - Patch by Frédéric Buclin <LpSolit@gmail.com> r=joel a=justdave

Bug 288663: The inclusion and exclusion lists behave incorrectly when a product or a component is called "Any" - Patch by Frédéric Buclin <LpSolit@gmail.com> r=myk a=myk

Bug 290095: Do not display flag types in show_bug.cgi whose inclusion list is empty - Patch by Frédéric Buclin <LpSolit@gmail.com> r=joel, a=justdave

Bug 238878: Make hidden-fields template, User Matching and Flags use direct CGI instead of [% form.foo %] - Patch by Teemu Mannermaa <wicked@etlicon.fi> r=LpSolit a=justdave

Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=myk, a=myk

Patch By Kevin Benton <kevin.benton@amd.com> r=mkanat, a=myk

Bug 174295: ANSI SQL requires all columns in SELECT to be in GROUP BY, unless they are in "aggregate" functions
Patch By Tomas Kopal <Tomas.Kopal@altap.cz> r=joel, a=myk

Patch for bug 180879: Implement privs for bug flags modification; patch by Frédéric Buclin <LpSolit@netscape.net>, r=joel, a=justdave.

r=kiko
a=justdave

Patch by Tomas Kopal <Tomas.Kopal@altap.cz>
r=jouni, a=justdave

r=joel, justdave
a=justdave

Fix for bug 228917: Makes some flag SQL work with PostgreSQL by using the semantically equivalent INNER JOIN over a comma (,).
Patch by mkanat@kerio.com.
r=myk
a=myk

flag. Simple namespace fix. r=myk, a=myk.

r,a=justdave

r=myk,jake

r=bbaetz,jpreed
a=justdave

Fix for bug 98801: Implementation of the request tracker, a set of enhancements to attachment statuses.
r=gerv,bbaetz