Poweradmin Files

✨ Highlights

Patch release for the 4.3.x line. Focus is permission and authorization hardening across the API and DNSSEC, API-backend mode polish (record ordering, dashboard resilience, consistency checks), template sync correctness, and Docker schema initialization for fresh containers.

🐛 Fixes

API permissions and authorization

• Permission templates are validated on /users create and update so a user can no longer self-elevate by assigning a higher template, and accounts with broken templates are surfaced (#1219).
• Zone listing in both the internal and V1 APIs is scoped to zones the requesting user can actually see, instead of leaking the full zone set.
• DNSSEC operations now require full edit permission and zone ownership before they can run.

Authentication URLs

• OIDC and SAML callback, post-logout, and SP/API-docs base URLs are pinned to interface.application_url instead of being derived from request headers, so they stay correct behind proxies and can't be influenced by client-supplied host headers.

API-backend mode

• Database consistency checks are skipped when running against the PowerDNS API backend, where the local tables they inspect don't apply (#1292).
• Dashboard stats panel keeps working when the PowerDNS tables are unavailable.
• SOA, NS, and apex records are pinned to the top of the zone record list regardless of sort column or direction, in both the standard and API-backend listings (#1250).
• Record ID column and its toggle are hidden in API mode where the value isn't meaningful (#1319).

Templates and zones

• LUA template records are now applied to IPv4 reverse zones (#1248).
• Zone template sync clears stale zone_template_sync rows when a zone's template changes (#1249) and reconciles sync for all owners of a shared zone.
• Add-zone flow keeps reverse-zone context as you move through it (#1225).

Search and exports

• Record search qualifies the ORDER BY column to fix an ambiguous-column error (#1224) and sorts grouped results by their aggregate alias for PostgreSQL.
• CSV exports quote cells that begin with special characters to prevent spreadsheet formula injection.

Docker

• Fresh containers initialize the MySQL/PostgreSQL schema on first start, and can optionally initialize the PowerDNS schema for empty databases (#1307).

Localization

• Remaining validation, DNSSEC, and record messages are translated, and the new API-backend consistency-check notice is added and translated.

📦 Upgrading

Drop-in replacement for v4.3.2. PHP 8.2+ required (unchanged).

Full changelog: https://github.com/poweradmin/poweradmin/compare/v4.3.2...v4.3.3