Poweradmin Files

✨ Highlights

Patch release for the stable 4.2.x line. Focus is authentication callback-URL hardening, API-mode and permission scoping, and record, template and search fixes.

🐛 Fixes

Authentication

• OIDC and SAML URLs (OIDC redirect_uri, OIDC post-logout redirect, and the SAML ACS/SLO/entityID plus the API docs base URL) are now built from the configured interface.application_url instead of the request Host header. The fallback no longer trusts request-time Host headers, so these URLs can't be altered per request. Set application_url to keep them stable.

API and permissions

• Permission templates are validated on user create/update, and perm_templ can no longer be set in a way that allows self-elevation; users with broken templates are now surfaced (#1219).
• Zone listing in both the internal API and V1 API is scoped to zones the user can actually see.
• DNSSEC operations now require full edit permission and zone ownership.

Records, templates and search

• SOA, NS and apex records stay pinned to the top of the record list regardless of sort column or direction (#1250).
• LUA template records are applied to IPv4 reverse zones (#1248).
• Zone template sync clears stale zone_template_sync rows when a zone's template changes (#1249), and reconciles sync for all owners of a shared zone.
• Add-zone flow keeps reverse context (#1225).
• Search qualifies the ORDER BY column to fix an ambiguous-column error (#1224) and sorts grouped results correctly on PostgreSQL.
• CSV export quotes leading special characters in cells.

Other

• Localization fills in remaining record-add and DNS validation messages.

📦 Upgrading

Drop-in replacement for v4.2.3. PHP 8.2+ required (unchanged).

Full changelog: https://github.com/poweradmin/poweradmin/compare/v4.2.3...v4.2.4