allow modifying rule number

Author: Pearl1594

cloudstack/resource_cloudstack_network_acl_rule.go

@@ -972,6 +972,14 @@ func ruleNeedsUpdate(oldRule, newRule map[string]interface{}) bool {
 		return true
 	}
 
+	// Check rule_number
+	oldRuleNum, oldHasRuleNum := oldRule["rule_number"].(int)
+	newRuleNum, newHasRuleNum := newRule["rule_number"].(int)
+	if oldHasRuleNum != newHasRuleNum || (oldHasRuleNum && newHasRuleNum && oldRuleNum != newRuleNum) {
+		log.Printf("[DEBUG] Rule number changed: %d -> %d", oldRuleNum, newRuleNum)
+		return true
+	}
+
 	oldDesc, oldHasDesc := oldRule["description"].(string)
 	newDesc, newHasDesc := newRule["description"].(string)
 	if oldHasDesc != newHasDesc || (oldHasDesc && newHasDesc && oldDesc != newDesc) {
@@ -1055,6 +1063,12 @@ func updateNetworkACLRule(cs *cloudstack.CloudStackClient, oldRule, newRule map[
 
 		p.SetTraffictype(newRule["traffic_type"].(string))
 
+		// Set rule number if provided and non-zero
+		if ruleNum, ok := newRule["rule_number"].(int); ok && ruleNum > 0 {
+			p.SetNumber(ruleNum)
+			log.Printf("[DEBUG] Set rule_number=%d", ruleNum)
+		}
+
 		protocol := newRule["protocol"].(string)
 		switch protocol {
 		case "icmp":