cPanel Blog

Managing Zone Editing Permissions in cPanel

As of cPanel & WHM version 60, the cPanel interface had four different places that allowed you to edit your zone files in different ways. The Simple DNS Editor (cPanel >> Domains >> Simple DNS Editor) allowed the user to setup A records, and CNAMEs records. The Advanced DNS Editor (cPanel >> Domains >> Advanced DNS Editor) provided the ability to setup, edit, and delete records such as TXT records, SRV records, and AAAA records. The MX Entry interface provided the ability to set MX records. 
 
Needless to say, this has always been very complicated for the end-user to understand, and it is complicated for our development team to track the different places a user could change DNS settings. We wanted to condense this all down into a single interface so that users could have one-stop-shopping experience for solving their DNS needs. This new interface would provide users the ability to change a multitude of DNS settings in one place, through a clean and updated interface. 

Managing permissions in the The Zone Editor

In cPanel & WHM version 62 our Development Team introduced the new Zone Editor Interface (cPanel >> Domains >> Zone Editor) into cPanel & WHM. This interface combined the Simple and Advanced Zone editors, and provided a significantly improved user experience over both of them.

The benefits were immediately seen, and our users loved the simplified interface. The feedback we have gotten from them has been great to hear!

However, many Hosting Providers still wanted to limit and control the specific editing permissions that a cPanel user can perform. For that reason, we wanted to provide the functionality that these hosts have had for many years in the new Zone Editor interface.

In order to provide that functionality, we have left the ‘Simple’, ‘Advanced’, and ‘MX Entry’ feature permissions in the WHM feature manager interface. Historically these features would define whether or not the interfaces were viewable in cPanel. This also ensures that all existing accounts retain their settings, and require no action from webhosts. 

Here’s a breakdown of how those feature permissions work with the new Zone Editor:

  • If you have only the Simple DNS Editor permission set for your account, you will only be able to setup A records, CNAMEs, and DNSSEC settings through the new Zone Editor Interface.
  • If you have the Advanced DNS Editor permission set for your account, you will be able to edit A records, CNAMEs, DNSSEC settings, TXT records, SRV records, and AAAA Records through the new Zone Editor Interface.
  • If you have the MX Entry feature set for your account, you will be able to set the MX records for your account through the new Zone Editor Interface.

What’s next?

For more information about the new Zone Editor, you can check out our Zone Editor documentation. There are a few feature requests related to the Zone Editor interface that you might be interested in adding your voice to as well. If you have questions, you can ask them below or find me on twitter!

benny Vasquez

scripter, crafter, cPanel's Community Manager. Facilitating communication between cPanel's amazing development team, and cPanel's amazing community. Find me on twitter: @cpaneldev

  • Scott Neader

    Hi Benny! On the old MX Entry screen, the customer was able to set Mail Routing also (Automatic, Local, Remote, Backup). On the new Zone Editor, that feature seems to be missing. Perhaps the thought is that everyone just uses Automatic, but we use forced Local a lot, due to using Spam Experts filtering (i.e. remote server filters the mail, then it’s delivered locally… so you have ‘remote’ MX records, but still need Local forced). Am I missing something? I also find the new Zone editor kind of clunky… when you add a new record, it doesn’t show up, making you think it didn’t work. But if you ‘Refresh’ then it appears. I also very much dislike the default of only showing the first 10 records… that lends to significant confusion. I DO like the idea of having a single Zone Editor, so this is the right direction. Thanks for listening.

    • cPanelbenny

      Hey Scott! Thanks for the feedback. 🙂

      We aren’t currently planning to remove the MX Editor yet, because it really does serve a purpose (like the one you mentioned: being able to adjust the routing). It sounds like you might be interested in this:

      https://features.cpanel.net/topic/when-adjusting-mx-records-detect-localremote-domain-change

      If the entry isn’t showing up as you edit the zone then that would be considered a bug, for sure. I just tested on my 64 server and I’m not seeing that bug there. Are you running RELEASE?

      The default of 10 records can definitely be confusing. The good news is that as of version 64, if you adjust how many you’re seeing, that setting is saved. We reacted to this request for that one:

      https://features.cpanel.net/topic/new-zone-editor-remember-how-many-records-you-like-to-show

      • Scott Neader

        Hi Benny. I’m seeing that behavior in Stable 62. Regarding Mail Routing and your feature request, I voted and attempted to leave a lengthy comment, but it just disappeared after submission (no indication that it was held for moderation nor was there any error). Here is what I tried to post:

        “I am less interested in ‘detecting’ local or remote, and more interested in making SURE that the ability to CHOOSE routing is still available. Some of our customers utilize 3rd party spam filtering, such as Spam Experts. This requires that MX records be set to non-local MX records, but Email Routing MUST be set to LOCAL. If you use ‘auto detect’ then this is completely broken… cPanel will detect ‘remote’ MX records, and set Email Routing to ‘Remote’… thus, when emails arrive, Exim will reject them. Not acceptable. Please do something in the new Zone Editor to allow Mail Routing selection, just like the old MX Entry did. That worked perfectly fine.”

        Regarding being able to choose the number of things shown and have that number saved… that is something I have been begging for, for many years. I’m so glad to see it coming!! Super!!

    • If you have only the Simple DNS Editor permission set for your account, you will only be able to setup A records, CNAMEs, and DNSSEC settings through the new Zone Editor Interface.

      I’ll solved my problem