Currently, all users are able to view bug history. We should be able to restrict bug history to specific user access levels and above (i.e. Developers and higher). Perhaps the configuration option could be $g_history_threshold = DEVELOPER;

For reasons of HIPPA and other state/federal privacy requirements, we sometimes need to sanitize information entered on MantisBT issues. The face of the issue is changed, but the history maintains the information removed for compliance, thereby circumventing sanitization efforts.