DNS server / client restrictions

[paradoxni]

I am thinking of using ISPconfig on a DNS master server and then pure bind slaves.

Everything looks like it should work well however I need to give clients access to their domain records...this is kinda possible but I need to restrict it to adding/editing records only not adding new zones or editing TTLs etc.

Also can the client logins be moved to a different port than the "admin" account login, so that admin access can be limited via firewall?

Is this possible with the current version of ISPconfig3?