How to restrict user to only create records?

[chaitanya.veerla]

Hi,

I am using nictool to maintain my Bind DNS. I am very happy with the tool. I have got a requirement from one of my customer  to restrict user to create records and not to edit the records.

I have given user access to create new resource record and disable edit records permission. But user is unable to create records unless he is having edit records permission. Is there anyway to do this ?? please let me know ??

Thanks & Regards,
Chaitanya

[matt]

Allowing a user to "create but not edit" does not make sense because creating DNS records is effectively allowing a user to edit. Imagine the case where an existing record for www points to 1.1.1.1. By allowing a user to "create", they can create more www records, pointing anywhere they like.  While they technically haven't "edited" the existing record, they have effectively changed its meaning.

[chaitanya.veerla]

Thanks Matt for your reply.

Or is there any way to restrict users only create CNAME not other records.

Regards,
Chaitanya

[matt]

Nope.