Merge branch 'master' into develop
PROV-819 Modify schema to add source_id field to models that lack it
PROV-819 Configuration screen for source level access control
PROV-819 First cut implementation of source-level access control enforcement
NOJIRA restore paging and record count to browse results
PROV-819 source-level access control in browse caching
PROV-819 Add source lists to tables that now have them
NOJIRA Remove debugging code
NOJIRA Allow empty URL
NOJIRA Fix broken save buttons
PROV-819 Source level access control implementation:

1. Added support for default source
2. Source drop-down in UI now restricted to allowed sources
3. Source restrictions bypassed for administrators
4. Begun consolidation of hierarchy code that needs source filtering
5. Removed findByLabel code; replaced with BaseMode::find()
6. Fixed various source ACL configuration issues
PROV-819 Bypass type restriction checks for administrators; change brings type ACL into sync with source ACL
NOJIRA allow access to installer
PROV-819 Remove debugging code
PROV-824 Fix for broken idno form elements due to the same type code being used across items. There is nothing wrong with using the same type code in two different types of record; the problem is with the id numbering system, which was checking validity of a type name without respect to the format (aka. table or item type). Since a type valid for, say, ca_objects, was being returned as valid for, say, ca_object_lots when you went to generate a form element it would try to pull the config for the type rather than reverting to the default config as it should. The result would be a broken form element.
PROV-825 Honor showUndated when setting original value in attribute
PROV-826 Don't pull in related objects when viewing object-collection hierarchy from point of view of the object
PROV-827 Revised show/hide media list in editor inspector. Eliminated buttons and now use option/alt-click to toggle media visibility
PROV-819 Fix base profile typo made while adding new tour_sources list
PROV-819 Check if request is available before trying to do admin user bypass; installer will call this without a request in place