DNS Zones: Console Lock #660
Description
High-Level Summary
I'm an operator with a ton of DNS Zones in my Datum Runtime (datum org, datum-cloud project).
Two of those zones are important and we cannot have records deleted: datum.net, and datumdomains.net. The rest, not so much.
I would like the ability to disable record writes in the Console for a particular DNS Zone. Ideally, disabling this would last for X Time Period, reënabling automatically several minutes later; like a door on a pneumatic arm.
Motivation
The Console is great for domains with smaller numbers of records, but enormous record sets can be terrifying to edit in a GUI.
I want to be able to force my fellow users of my project into IaC/datumctl interactions, in a revocable way.
Goals
A load-bearing DNS zone can have an additional layer of protection put over it in the Console that protects it from fatfingers or overeager nontechnicals. This layer can be removed with a Settings switch for a limited period of time.
Non-Goals
No response