Public bug reported:
Affects: gnome-cups-manager (Ubuntu)
Severity: Wishlist
Priority: Medium
Status: Confirmed
Description:
There is strange cupsys implementation in Ubuntu. New users, that aren't in lp
or lpadmin group, are able to print on printer. This is very bad if you want to
allow printing only to certain users. What's even worse is that such users are
unable to delete their own print jobs. Trying to remove print job (via lprm #ID)
asks for password. When enterd, it is not accepted. Adding user to lp group
doesn't change a thing.
Adding user to lpadmin group fixes this issue. Now user is able to print and
delete print queues. This is fine. But, lpadmin user can erase any print queue.
So, he can delete even root's print queues. But, this should be fine, if we
consider that lpadmin is printing admin. He should be able to do everything with
printing (add printer, remove printer, manage queues, etc...).
The problem is how to create user that will be able to print and delete only his
print queues and how to create user that will not be able to print at all. I
think unused lp group should fix that. I think only users in lp group should be
able to print and delete only their print queues. lpadmin group should stay as
is.
--
cupsys: allow printing restrictions to a subset of users
https://launchpad.net/bugs/18447
--
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs
