Merge branch 'release_3.3.0' into filterama

awx/api/generics.py

@@ -23,7 +23,7 @@ from django.utils.translation import ugettext_lazy as _
 from django.contrib.auth import views as auth_views
 
 # Django REST Framework
-from rest_framework.exceptions import PermissionDenied, AuthenticationFailed, ParseError, NotAcceptable
+from rest_framework.exceptions import PermissionDenied, AuthenticationFailed, ParseError, NotAcceptable, UnsupportedMediaType
 from rest_framework import generics
 from rest_framework.response import Response
 from rest_framework import status
@@ -197,6 +197,10 @@ class APIView(views.APIView):
         except (PermissionDenied, ParseError) as exc:
             request.drf_request_user = None
             self.__init_request_error__ = exc
+        except UnsupportedMediaType as exc:
+            exc.detail = _('You did not use correct content_type in your HTTP request. \
+                            If you are using our REST API, the content_type must be application/json')
+            self.__init_request_error__ = exc
         return drf_request
 
     def finalize_response(self, request, response, *args, **kwargs):

awx/api/serializers.py

@@ -1193,10 +1193,13 @@ class OAuth2ApplicationSerializer(BaseSerializer):
     def get_related(self, obj):
         res = super(OAuth2ApplicationSerializer, self).get_related(obj)
         res.update(dict(
-            tokens   = self.reverse('api:o_auth2_application_token_list',     kwargs={'pk': obj.pk}),
+            tokens = self.reverse('api:o_auth2_application_token_list', kwargs={'pk': obj.pk}),
+            activity_stream = self.reverse(
+                'api:o_auth2_application_activity_stream_list', kwargs={'pk': obj.pk}
+            )
         ))
         return res
-        
+
     def get_modified(self, obj):
         if obj is None:
             return None

awx/api/views.py

@@ -3720,7 +3720,11 @@ class WorkflowJobTemplateCopy(WorkflowsEnforcementMixin, CopyAPIView):
     copy_return_serializer_class = WorkflowJobTemplateSerializer
 
     def get(self, request, *args, **kwargs):
+        if get_request_version(request) < 2:
+            return self.v1_not_allowed()
         obj = self.get_object()
+        if not request.user.can_access(obj.__class__, 'read', obj):
+            raise PermissionDenied()
         can_copy, messages = request.user.can_access_with_errors(self.model, 'copy', obj)
         data = OrderedDict([
             ('can_copy', can_copy), ('can_copy_without_user_input', can_copy),