Changes since version 1.06x

NicTool now uses an action-oriented permissions system. Group objects may be created with specific sets of permissions defining what actions are allowed by users inside the group. Users can be created with their own set of permissions, or by default they inherit the permissions defined for their group. The Permissions define what types of objects can be created, deleted, modified, or delegated. (See new_user and new_group)

Users of NicTool can now "Delegate" Zones and Zone Records to any of the sub-groups available to them. They can specify what the delegate group can do to the delegated Zone or Record, including modify,re-delegate, and remove delegation. In addition they can specify whether Zone Records can be added to or deleted from a delegated Zone. Delegation provides a way for certain groups of users to have limited access to Zones and Records. One application of this feature is that it enables administrators to delegate reverse-lookup Zones and Records ("in-addr.arpa" zones) to an appropriate person. (See delegate_zones and delegate_zone_records.)

With the Permissions and Delegation changes made to the system, the behavior of Nameserver objects needed to be changed as well. When a new Group is created, you must now specify the list of Nameserver objects that users in that group may publish zones to. (See new_group and edit_group.)

In version 1.06, the function save_X was used both to create and modify objects of type X. Each of those functions has been split into new_X and edit_X. This is a less clutered protocol.

Some functions take some kind of "list" as a parameter. In version 1.06 it was required to be a comma-separated string. You can now specify the list as a true array as well. A comma-separated string is still allowed for backwards compatibility.

The parameter nt_group_id was unneeded and should no longer be included.

DEPRECATED since version 2.00b. Use new_user or edit_user.

Use this function to create new User objects. You can specify all of the permissions parameters or you can include the parameter inherit_group_permissions with a value of '1' to explicitly have permissions inherited from the user's group.

Use this function to modify existing User objects.

DEPRECATED since version 2.00b. Use new_group or edit_group.

Use this function to create new Group objects.

Use this function to modify existing Group objects.

The parameter nt_group_id now specifies the group that should be deleted, and the parameter gid is no longer used.

DEPRECATED since version 2.00b. Use new_zone or edit_zone.

Use this function to create new Zone objects.

Use this function to modify existing Zone objects. You can undelete a deleted zone by including the parameter deleted with a value of '0'.

DEPRECATED since version 2.00b. Use new_zone_record or edit_zone_record.

Use this function to create new Zone Record objects.

Use this function to modify existing Zone Record objects.

DEPRECATED since version 2.00b. Use new_nameserver or edit_nameserver.

Use this function to create new Nameserver objects.

Use this function to modify existing Nameserver objects.

You can now search for zones that have been deleted by including the parameter search_deleted with a value of '1'.

Get the permissions settings for a particular group (new since version 1.06x).

Get the permissions settings for a particular user (new since version 1.06x).

Delegate a list of Zones to a certain group (new since version 1.06x).

Delegate a list of Zone Records to a certain group (new since version 1.06x).

Modify the delegation permissions of a Zone delegated to a certain Group (new since version 1.06x).

Modify the delegation permissions of a Zone Record delegated to a certain Group (new since version 1.06x).

Remove the delegation of a Zone to a Group (new since version 1.06x).

Remove the delegation of a Zone Record to a Group (new since version 1.06x).

Get a list of Zones that have been delegated to the specified Group (new since version 1.06x).

Get a list of Zone Records that have been delegated to the specified Group (new since version 1.06x).

Get a list of Groups that have been delegated the specified Zone (new since version 1.06x).

Get a list of Groups that have been delegated the specified Zone Record (new since version 1.06x).