[cups.bugs] [LOW] STR #2450: 'default' OpPolicy makes use of non-existing operations ("CUPS-Add-Printer"/"CUPS-Add-Class")

[Kurt Pfeifle]

DO NOT REPLY TO THIS MESSAGE.  INSTEAD, POST ANY RESPONSES TO THE LINK BELOW.

[STR New]

(I've sent this as a mail to the 'bugs' newsgroup a while ago, since at the
time the STR site was unaccessible for me...)

Summary:
--------

  ======================================================================
  The 'default' OpPolicy shipped by CUPS enumerates 2 non-existing
  operations, "CUPS-Add-Printer" and "CUPS-Add-Class". These should
  instead be named "CUPS-Add-Modify-Printer" + "CUPS-Add-Modify-Class".
  ======================================================================


Details:
========

When trying to make a large, enterprise-wide CUPS installation work
without flaws that is heavily relying on different OpPolicies for
different printers, we found an operation name in the error_log file
called "CUPS-Add-Modify-Printer".

Upon checking, I found that this operation indeed appears in the CUPS
documentation:

 
http://localhost:631/help/ref-cupsd-conf.html?TOPIC=References&QUERY=#LimitIPP),

but it does not show up in the default cupsd.conf template as provi-
ded by clicking on "Use Default Configuration File" (on page
http://localhost:631/admin?op=config-server).

Here is the extract (with my emphasise and my line breaks inserted
for readability):

<Policy default>
  [....]
  # All administration operations require an *adminstrator* to
authenticate...
  <Limit Pause-Printer Resume-Printer Set-Printer-Attributes
Enable-Printer \
         Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs \
         Release-Held-New-Jobs Deactivate-Printer Activate-Printer \
         Restart-Printer Shutdown-Printer Startup-Printer Promote-Job \
         Schedule-Job-After *CUPS-Add-Printer* CUPS-Delete-Printer \
         *CUPS-Add-Class* CUPS-Delete-Class CUPS-Accept-Jobs
CUPS-Reject-Jobs \
         CUPS-Set-Default>
    AuthType Basic
    Require user @SYSTEM
    Order deny,allow
  </Limit>
  [....]
</Policy>

Please do also note there is a little typo in "adminstrator".

Link: http://www.cups.org/str.php?L2450
Version: 1.2-current