[cups.general] Printer Control

[Helge Blischke]

"Minatra, Pat H." wrote:
> 
> The Software Administrators Manual hints at this option, it shows
> 
> <Location /printers/name>
> ...
> <Location>
> 
> So, how do I fill in the blanks?
> 
> I guess I am looking for examples as to how to put in the info which I
> cannot find.  If I were guessing something like:
> 
> <Location /printers/name>
> /printers/IMAP12
> Allow from user=userlogin
> op=start-printer,stop-printer
> </Location>
> 
> Or is it:
> 
> <Location /printers/IMAP12>
> Allow user userloginid
> op=start-printer,stop-printer
> </Location>
> 
> The documentation is weak and I am not clear, any help would be
> appreciated as I really need to do this.
> 
> Thank you so much!  Have a GREAT day!
> 
> -------------------------
> "Life is but a twinkle in the eye of eternity"
> "The shortest distance between a problem and a solution is the distance
> between your knees and the floor"
> "sorrow looks back - worry looks around - faith looks up"
> Regards,
> Pat H. Minatra - N5GJR
> (325) 670-5804 voice
> (325) 670-1570 fax
> Hardin*Simmons University
> www.hsutx.edu
> PO BOX 16040
> Abilene, TX  79698
> 
> -----Original Message-----
> From: cups-bounces at easysw.com [mailto:cups-bounces at easysw.com] On Behalf
> Of Minatra, Pat H.
> Sent: Thursday, March 30, 2006 10:27 AM
> To: Mirror of cups.general Newsgroup
> Subject: RE: [cups.general] Printer Control
> 
> Can you let me know which manual?
> 
> I have gone through the user manual to no avail and I am now going
> through the Administrators manual but if it is there I am not seeing it
> or do not know what to key off of.
> 
> Thank you so much!
> 
> -------------------------
> "Life is but a twinkle in the eye of eternity"
> "The shortest distance between a problem and a solution is the distance
> between your knees and the floor"
> "sorrow looks back - worry looks around - faith looks up"
> Regards,
> Pat H. Minatra - N5GJR
> (325) 670-5804 voice
> (325) 670-1570 fax
> Hardin*Simmons University
> www.hsutx.edu
> PO BOX 16040
> Abilene, TX  79698
> 
> -----Original Message-----
> From: cups-bounces at easysw.com [mailto:cups-bounces at easysw.com] On Behalf
> Of Helge Blischke
> Sent: Thursday, March 30, 2006 10:23 AM
> To: cups at easysw.com
> Subject: Re: [cups.general] Printer Control
> 
> "Minatra, Pat H." wrote:
> >
> > I need to be able to give a user control of a specific printer but not
> > access ALL the other printers on the network.  They need to be able to
> > perform enable, disable and cancel; but just for this specific
> printer.
> >
> > How do I do this?  I am thinking that I may not want to give them
> access
> > to the group sys which is the SystemGroup default defined in the
> > cupsd.conf file.  Can I define another 'group' for just these specific
> > people and allow them access to just specific things?
> >
> > I am unable to find anything in the manual about controlling the
> > printers to this level.
> >
> > Thanks for any information you can provide.
> >
> > Have a GREAT day!
> >
> > -------------------------
> > "Life is but a twinkle in the eye of eternity"
> > "The shortest distance between a problem and a solution is the
> distance
> > between your knees and the floor"
> > "sorrow looks back - worry looks around - faith looks up"
> > Regards,
> > Pat H. Minatra - N5GJR
> > (325) 670-5804 voice
> > (325) 670-1570 fax
> > Hardin*Simmons University
> > www.hsutx.edu
> > PO BOX 16040
> > Abilene, TX  79698
> 
> In your cupsd.conf, you may specify the access parameters for a specific
> printer by
> <Location /printers/name_of_the_respecive_printer?op=operation_name>
> ...
> </Location>
> 
> where operation_name is the name of the operation like stop-printer,
> start-printer, hold-job, release-job,
> etc., and "..." denotes all the allowed access specifications (deny,
> allow, require valid-user, etc. etc.).
> See the documentation for further details.
> 
> Helge
> 

Here is just an example:
# This for general access for printing etc.
<Location /printers>
Order Deny,Allow
Deny From All
Allow From @LOCAL
</Location>
# Now restrict access to specific things:
# First, deny printer operations
<Location /printers?op=stop-printer>
Order Deny,Allow
Deny From All
</Location>  # analogous for the other operations like start printer, configure printer etc.
# Now set up special permissions:
<Location /printers/the_special_printer?op=stop-printer>
Order Deny,Allow
Deny From All
Allow From @LOCAL
Require user login_name_of_user
</Location>

and so on. It may get a bit complicated but it works.

I haven't not yet looked into CUPS 1.2 if it is easier there ...

Helge

-- 
Helge Blischke
Softwareentwicklung
SRZ Berlin | Firmengruppe besscom
http://www.srz.de