Re: Cups / Samba: force print options / policy

[Jerry Stuckle <jstuckle@attglobal.net>]

On 2/10/2014 7:04 AM, Denny Fuchs wrote:
> hi,
>
> I have Wheezy with Cups, Samba and a Ricoh Aficio. I try to force that the users can't change the job destination on the printer. The printer has two destinations:
>
> 1. Normal printer
> 2. Document server
>
> I want to force the users, to print only to the document server via Samba. But the user is able (on there private laptops) to change via the driver (Windows/Linux/OSX) the destination. That's bad, because they can print, without paying for.
>
> I tried to create a Policy called "mensakarte", copied all default lines, except:
>
> ...
> <Policy mensakarte>
>    JobPrivateAccess all
>    JobPrivateValues none
> <Limit Set-Job-Attributes Set-Printer-Attributes>
>      Require user @SYSTEM
>      Order deny,allow
> </Limit>
>
> ... all others ...
>
> </policy>
> ..
>
> after:
>
> lpadmin -p payprinter -o printer-op-policy=mensakarte
>
>
> and tried again, but it changed nothing.
>
> So, what I have done wrong?
>
> cu denny

You can't stop what the users are doing on their own computers, and as 
long as the printer is directly available to them, they can print to it.

But why is the printer available to them in the first place?  It should 
only be available through the document server.

Jerry