Design limitation: domain admin can't change domain from "alias domain" to "'standalone' domain"

[ralfbergs]

Contribution guidelines

• I've read the contribution guidelines and wholeheartedly agree

Checklist prior issue creation

• I understand that failure to follow below instructions may cause this issue to be closed.
• I understand that vague, incomplete or inaccurate information may cause this issue to be closed.
• I understand that this form is intended solely for reporting software bugs and not for support-related inquiries.
• I understand that all responses are voluntary and community-driven, and do not constitute commercial support.
• I confirm that I have reviewed previous issues to ensure this matter has not already been addressed.
• I confirm that my environment meets all prerequisite requirements as specified in the official documentation.

Description

I realized that a domain admin can't change on their own a domain they own from being an "alias domain" to a "'standalone' domain". That limits the domain admin in what they can do with their domain. In my view, a domain admin shouldn't require the help of a "full" admin after their domains have been included in mailcow and assigned to them. Everything else should be in the power of the domain admin.

Steps to reproduce:

1. As an admin, set up a domain to be the alias domain of another one.
2. Observe that as an admin, you can't assign this alias domain to the domain admin. This already highlights that the alias domain is treated in a special way.
3. As a domain admin, observe that you cannot modify the alias domain in any way.

Logs:

N/A

Which branch are you using?

master (stable)

Which architecture are you using?

x86_64

Operating System:

N/A

Server/VM specifications:

N/A

Is Apparmor, SELinux or similar active?

N/A

Virtualization technology:

N/A

Docker version:

N/A

docker-compose version or docker compose version:

N/A

mailcow version:

2025-12a

Reverse proxy:

N/A

Logs of git diff:

N/A

Logs of iptables -L -vn:

N/A

Logs of ip6tables -L -vn:

N/A

Logs of iptables -L -vn -t nat:

N/A

Logs of ip6tables -L -vn -t nat:

N/A

DNS check:

N/A