Fix for a security hole created by cloned communities/classes, the cloned communities inherit permissions from the top level dotlrn package which makes them readable by the public
adding ams::util::orderby_clause and making ams::values_not_cached and ams::ad_form::elements use it so that attributes are orderby by list then by sort order , not just sort order