cups configuration

[Mikkel L. Ellertson]

Aaron Konstam wrote:
> On Sat, 2009-07-11 at 09:28 -0500, Mikkel L. Ellertson wrote:

> It looks to me that more changes would be needed. At least I conclude
> that from the folllowing section of the cupsd.conf file:
>  # All administration operations require an administrator to
> authenticate...
>   <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer
> CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default
> CUPS-Get-Devices>
>     AuthType Default
>     Require user @SYSTEM
>     Order deny,allow
>   </Limit>
> 
I should have been more specific. (Not enough coffee.) Near the
beginning of the cupsd.conf file there is a section:

# Administrator user group...
SystemGroup sys root

If you change it to:
SystemGroup sys root aaron

then aarom is authorized when you have "Require user @SYSTEM". But
if you do not want to give the user blanked permission, you can
change "Require user @SYSTEM" to "Require user @SYSTEM aaron" just
for that section.

But even if the user has no permissions to change things, they can
change their own default printer - they just can not change the
system default printer.

Mikkel
-- 

  Do not meddle in the affairs of dragons,
for thou art crunchy and taste good with Ketchup!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20090711/f4c7c1aa/attachment-0001.sig>