CKAN 1.3.3

Major: * Authorization checks added to editing Groups and PackageRelationships (#1052) * API: Added package revision history (#1012, #1071)

Minor: * API can take auth credentials from cookie (#1001) * Theming: Ability to set custom favicon (#1051) * Importer code moved out into ckanext-importlib repo (#1042) * API: Group can be referred to by ID (in addition to name) (#1045) * Command line tool: rights listing can now be filtered (#1072)

Bug fixes: * SITE_READ role setting couldn’t be overridden by sysadmins (#1044) * Default ‘reader’ role too permissive (#1066) * Resource ordering went wrong when editing and adding at same time (#1054) * GET followed by PUTting a package stored an incorrect license value (#662) * Sibling package relationships were shown for deleted packages (#664) * Tags were displayed when they only apply to deleted packages (#920) * API: ‘Last modified’ time was localised - now UTC (#1068)