Classes - denied user still able to print
angelb
angelb at bugarin.us
Mon May 14 09:20:59 PDT 2007
Hello all.
I have a printer class, 3668Class, which contains one printer, ricoh.
[root at stlam506 cups124]# cat classes.conf
# Class configuration file for CUPS v1.2.4
# Written by cupsd on 2007-05-14 10:55
<Class 3668Class>
Info MP Printers
Location anywhere
State Idle
StateTime 1179154824
Accepting Yes
Shared Yes
JobSheets none none
Printer ricoh
QuotaPeriod 0
PageLimit 0
KLimit 0
DenyUser stimpy
OpPolicy default
ErrorPolicy retry-job
</Class>
I've created a new account stimpy and set its password accordingly.
This account is a normal and non-administrative account:
[root at stlam506 cups]# useradd stimpy
User stimpy issued a command to print a job from cli using the printer
queue, ricoh. Printed successfully:
[stimpy at stlam506 tmp]$ lpr -Pricoh ./f1
...
I [14/May/2007:10:52:48 -0500] Adding start banner page "none" to job
5.
I [14/May/2007:10:52:48 -0500] Adding end banner page "none" to job 5.
I [14/May/2007:10:52:48 -0500] Job 5 queued on "ricoh" by "stimpy".
I [14/May/2007:10:52:48 -0500] Started backend
/opt/TWWfsw/cups124/lib/backend/s ocket (PID 31137) for job 5.
Now, I modified the 3668Class by going to "Set Allowed Users" by
entering "stimpy" and selected the option "Prevent these users from
printing" so that stimpy is dissallowed from printing. Also confirmed
this by checking the config file.
[root at stlam506 cups124]# grep stimpy classes.conf
DenyUser stimpy
User stimpy issued another command to print a job from cli using the
same printer que, ricoh, and it too printed successfully.
...
I [14/May/2007:10:55:07 -0500] Saving classes.conf...
I [14/May/2007:10:55:07 -0500] Class "3668Class" modified by "foo".
I [14/May/2007:10:55:08 -0500] Started "/opt/TWWfsw/cups124/lib/cgi-bin/classes.cgi" (pid=31238)
I [14/May/2007:10:55:27 -0500] Adding start banner page "none" to job
6.
I [14/May/2007:10:55:27 -0500] Adding end banner page "none" to job 6.
I [14/May/2007:10:55:27 -0500] Job 6 queued on "ricoh" by "stimpy".
I [14/May/2007:10:55:27 -0500] Started
backend /opt/TWWfsw/cups124/lib/backend/socket (PID 31247) for job 6.
Why was the user, stimpy, able to print through ricoh, inspite of it
being set denied from using the printer from the 3668Class class?
Perhaps I don't fully understand how the Classes work in CUPS. Any suggestion is appreciated.
Thanks,
Angel
More information about the cups
mailing list