I get your suggestion, but a newly created client record using resource plan with '0' Domains limit will be unable to create at least 1 domain.
In my understanding the resource plan dictates the limitations of the clients, both in the 'numbers'/'specs' configurable in their account (ex. # of domains, # of mails, etc) AND the access control/what is allowed in the panel (ex. can add domains, can change limit, etc.).
My problem is that the access control is not being applied to the client (i.e. "Can Add Domains" is not being followed). I have a "frontend" that communicates my kloxo servers where the domain management is being done, so I depend on the access control of kloxo to work as intended. In my specific case, I expect the panel to disallow clients to add domains given their plan settings when they login to the kloxo panel.