CLOUDSTACK-3149: Allow default ACLs when creating tier with ACL

Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo
Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/7c46cc95
Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/7c46cc95
Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/7c46cc95

Branch: refs/heads/vmsync
Commit: 7c46cc958049c815337f42bfde788bbe9fba4811
Parents: 90838d7
Author: Kishan Kavala <[email protected]>
Authored: Mon Jun 24 16:16:14 2013 +0530
Committer: Kishan Kavala <[email protected]>
Committed: Mon Jun 24 16:22:02 2013 +0530

----------------------------------------------------------------------
 server/src/com/cloud/network/NetworkServiceImpl.java | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cloudstack/blob/7c46cc95/server/src/com/cloud/network/NetworkServiceImpl.java
----------------------------------------------------------------------
diff --git a/server/src/com/cloud/network/NetworkServiceImpl.java 
b/server/src/com/cloud/network/NetworkServiceImpl.java
index e7de69e..5e900bb 100755
--- a/server/src/com/cloud/network/NetworkServiceImpl.java
+++ b/server/src/com/cloud/network/NetworkServiceImpl.java
@@ -1298,8 +1298,12 @@ public class NetworkServiceImpl extends ManagerBase 
implements  NetworkService {
                     throw new InvalidParameterValueException("Unable to find 
specified NetworkACL");
                 }
 
-                if(!vpcId.equals(acl.getVpcId())){
-                    throw new InvalidParameterValueException("ACL: "+aclId+" 
do not belong to the VPC");
+                if(aclId != NetworkACL.DEFAULT_DENY && aclId != 
NetworkACL.DEFAULT_ALLOW) {
+                    //ACL is not default DENY/ALLOW
+                    // ACL should be associated with a VPC
+                    if(!vpcId.equals(acl.getVpcId())){
+                        throw new InvalidParameterValueException("ACL: 
"+aclId+" do not belong to the VPC");
+                    }
                 }
             }
             network = _vpcMgr.createVpcGuestNetwork(networkOfferingId, name, 
displayText, gateway, cidr, vlanId, 

Reply via email to