// Licensed to the Apache Software Foundation (ASF) under one
// or more contributor license agreements.  See the NOTICE file
// distributed with this work for additional information
// regarding copyright ownership.  The ASF licenses this file
// to you under the Apache License, Version 2.0 (the
// "License"); you may not use this file except in compliance
// with the License.  You may obtain a copy of the License at
//
//   http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing,
// software distributed under the License is distributed on an
// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
// KIND, either express or implied.  See the License for the
// specific language governing permissions and limitations
// under the License.
package org.apache.cloudstack.acl;

import java.util.Date;

import javax.persistence.Column;
import javax.persistence.Entity;
import javax.persistence.EnumType;
import javax.persistence.Enumerated;
import javax.persistence.GeneratedValue;
import javax.persistence.GenerationType;
import javax.persistence.Id;
import javax.persistence.Table;

import org.apache.cloudstack.acl.SecurityChecker.AccessType;

import com.cloud.utils.db.GenericDao;

@Entity
@Table(name = ("acl_policy_permission"))
public class AclPolicyPermissionVO implements AclPolicyPermission {

    @Id
    @GeneratedValue(strategy = GenerationType.IDENTITY)
    @Column(name = "id")
    private long id;

    @Column(name = "policy_id")
    private long aclPolicyId;

    @Column(name = "action")
    private String action;

    @Column(name = "resource_type")
    private String entityType;

    @Column(name = "access_type")
    @Enumerated(value = EnumType.STRING)
    private AccessType accessType;

    @Column(name = "scope")
    @Enumerated(value = EnumType.STRING)
    private PermissionScope scope;

    @Column(name = "scope_id")
    private Long scopeId;

    @Column(name = "permission")
    @Enumerated(value = EnumType.STRING)
    private Permission permission;

    @Column(name = GenericDao.REMOVED_COLUMN)
    private Date removed;

    @Column(name = GenericDao.CREATED_COLUMN)
    private Date created;

    public AclPolicyPermissionVO() {

    }

    public AclPolicyPermissionVO(long aclPolicyId, String action, String entityType, AccessType accessType,
            PermissionScope scope,
            Long scopeId, Permission permission) {
        this.aclPolicyId = aclPolicyId;
        this.action = action;
        this.entityType = entityType;
        this.accessType = accessType;
        this.scope = scope;
        this.scopeId = scopeId;
        this.permission = permission;
    }

    @Override
    public long getId() {
        return id;
    }

    @Override
    public long getAclPolicyId() {
        return aclPolicyId;
    }


    public void setAclPolicyId(long aclPolicyId) {
        this.aclPolicyId = aclPolicyId;
    }

    @Override
    public String getEntityType() {
        return entityType;
    }

    @Override
    public AccessType getAccessType() {
        return accessType;
    }


    public void setEntityType(String entityType) {
        this.entityType = entityType;
    }

    public void setAccessType(AccessType accessType) {
        this.accessType = accessType;
    }

    @Override
    public PermissionScope getScope() {
        return scope;
    }

    public void setScope(PermissionScope scope) {
        this.scope = scope;
    }


    @Override
    public String getAction() {
        return action;
    }

    @Override
    public Long getScopeId() {
        return scopeId;
    }

    @Override
    public Permission getPermission() {
        return permission;
    }

    public void setAction(String action) {
        this.action = action;
    }

    public void setScopeId(Long scopeId) {
        this.scopeId = scopeId;
    }

    public void setPermission(Permission permission) {
        this.permission = permission;
    }

    public Date getRemoved() {
        return removed;
    }

    public Date getCreated() {
        return created;
    }
}

@@ -1197,16 +1197,97 @@
 ssType;%0A
+import org.apache.cloudstack.context.CallContext;%0A%0Aimport com.cloud.user.Account;
 %0Aimport 
@@ -3659,24 +3659,418 @@
 ScopeId() %7B%0A
+        // handle special -1 scopeId, current caller domain, account%0A        if ( scopeId %3C 0 )%7B%0A            Account caller = CallContext.current().getCallingAccount();%0A            if ( scope == PermissionScope.DOMAIN)%7B%0A                return caller.getDomainId();%0A            %7D else if (scope == PermissionScope.ACCOUNT) %7B%0A                return caller.getAccountId();%0A            %7D%0A        %7D%0A
         retu

Handle special scopeId = -1 case for current domain or current account in AclPolicyPermission table.