+#1019746 by Ralf: Check_plain role names.

+#1006482 by dereine: Fix filter: user posted or commented handler.
 #870960 by bojanz, dereine: Field label should derive from field Label, not field name.
 +#1056824 by greggles: Rename the displayed permission from "access all views" to "bypass views access control".

Sync the changelog with git.