Invalidate cache also on updateRolePermission, importRole and updateAccount APIs

Author: nvazquez

server/src/main/java/com/cloud/user/AccountManagerImpl.java

@@ -2356,6 +2356,7 @@ public AccountVO updateAccount(UpdateAccountCmd cmd) {
             validateRoleChange(account, role, caller);
             acctForUpdate.setRoleId(roleId);
             acctForUpdate.setType(role.getRoleType().getAccountType());
+            refreshRoleCheckersCacheOnPermissionsChange(role);
             checkRoleEscalation(getCurrentCallingAccount(), acctForUpdate);
         }
 

server/src/main/java/org/apache/cloudstack/acl/RoleManagerImpl.java

@@ -262,6 +262,8 @@ public RoleVO doInTransaction(TransactionStatus status) {
                     throw new CloudRuntimeException("Unable to import the role: " + name + ", failed to persist in DB");
                 }
 
+                accountManager.refreshRoleCheckersCacheOnPermissionsChange(newRole);
+
                 if (rules != null && !rules.isEmpty()) {
                     for (Map<String, Object> ruleDetail : rules) {
                         Rule rule = (Rule)ruleDetail.get(ApiConstants.RULE);
@@ -410,6 +412,7 @@ public boolean updateRolePermission(final Role role, final List<RolePermission>
         if (role.isDefault()) {
             throw new PermissionDeniedException("Role permission cannot be updated for Default roles");
         }
+        accountManager.refreshRoleCheckersCacheOnPermissionsChange(role);
         return role != null && newOrder != null && rolePermissionsDao.update(role, newOrder);
     }
 
@@ -419,6 +422,7 @@ public boolean updateRolePermission(Role role, RolePermission rolePermission, Pe
         if (role.isDefault()) {
             throw new PermissionDeniedException("Role permission cannot be updated for Default roles");
         }
+        accountManager.refreshRoleCheckersCacheOnPermissionsChange(role);
         return role != null && rolePermissionsDao.update(role, rolePermission, permission);
     }