Feature Request: Adding groups and group permissions?

[DaanSelen]

Expanding on #29

I wanted to inform about current plans on adding groups or companies that can manage certain zones? A bit like ZoneControl and PowerDNS-Admin?

[gjherbiet]

We are also interested in adding group management as one of the missing features of dns-ui.

While I have yet to produce some code, these are the foreseen features and implementation, for discussion:

• keep the same zone access levels (zone admin, zone operator)
• allow to assign zone access levels to groups besides users (in a new "Group Access" zone tab)
• use the highest zone access level between group-based and user-based
• allow to create groups and manage users group membership (in a new "Groups" menu)
• ideally allow to create groups on the fly either from LDAP or PHP headers (perhaps with a filter on the returned group names), like what is done for users currently

Based on what @thomas-pike said on #29 (comment), this would require:

• a new group table to store the groups
• a new group_membershiptable to store the group memberships
• either a redesign of the zone_access table (add a group_id column) or create a separate zone_group_access table
• Update the $zone->list_access(), $user->access_to() and $user->list_admined_zones() and potentially other functions in charge of managing access levels to zones.