printer access with policies

[Matthias Ehrig]

I try to control the access to printer queues with policies.
First I create new policies in cupsd.conf, e.g. <Policy group1> with
Allow statements for hosts, from which access is possible to defined
printer queues (OpPolicy group1 in printers.conf) of a central cups server, other hosts should not see this queues.
I use cups-1.2.7 for the cups server, but the configuration is unsuccessful ?

My questions are:

1. What is to set in the <Location /printers> section of cupsd.conf ?
  If the acces for a host is set, then access ist possible independent of
  settings in the Policy section

2. What is the difference between access and visibility of queues ?
  Can I configure queues so, that they are only looking on hosts of group1 ?

3. Is there a new or better documentation for using Policy scenarios ?

Can any help me ?

regards Matthias