[cups.general] I have a permissions problem cancelling jobs

[Michael Sweet]

Rob Tanner wrote:
> Hi,
> 
> I am trying to delegate to out helpdesk the task of canceling jobs.  All 
> the members of the helpdesk are in a system group (defined in 
> /etc/group) called helpdesk, and I have the following location 
> configuration in /etc/cups/cupsd.conf:
> 
> <Location /jobs/?op=cancel-job>
>    Order Deny,Allow
>    Deny From All
>    Allow From 10.*
>    AuthType Basic
>    AuthClass User
>    Require group wheel helpdesk
> </Location>
> 
> In /var/log/cups/access_log I see the following entry:
> 10.219.200.22 - speters [22/Mar/2006:11:34:52 -0800] "GET 
> /jobs/?op=cancel-job&job_id=1517&job_printer_uri=/printers/mathalleyps 
> HTTP/1.1" 200 1543
> 
> And in /var/log/cups/error_log I see the following corresponding error:
> E [22/Mar/2006:11:34:52 -0800] cancel_job: "speters" not authorized to 
> delete job id 1517 owned by "akamal"!
> 
> What am I missing?

Um, it won't quite work that way; you also need to add the helpdesk
group to the SystemGroup.

This is all a lot easier in CUPS 1.2, BTW - there you would just
tweak the Cancel-Job policy to require the helpdesk group... :)

-- 
______________________________________________________________________
Michael Sweet, Easy Software Products           mike at easysw dot com
Internet Printing and Document Software          http://www.easysw.com