Description Mirac Erdemiroglu 2023-03-06 16:51:58 CET

UCS 5.0-3

the cups/policy/default/* UCR variables can be used to set access permissions for specific CUPS operations.
We have to set a few values there that differ from the default so that printing from the iPads works.

But: The postinst script of the package "univention-printserver", which is executed after each update of the package, always resets these variables!

root@dc000:/var/lib/dpkg/info# cat univention-printserver.postinst

# cups default policies

univention-config-registry set \

        cups/policy/default/JobPrivateAccess="default" \

        cups/policy/default/JobPrivateValues="none" \

        cups/policy/default/SubscriptionPrivateAccess="default" \

        cups/policy/default/SubscriptionPrivateValues="default" \

        cups/policy/default/limit/1="Create-Job Print-Job Print-URI Validate-Job" \

        cups/policy/default/limit/1/Order="deny,allow" \

        cups/policy/default/limit/2="Send-Document Send-URI Cancel-Job Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job Cancel-My-Jobs Close-Job CUPS-Move-Job CUPS-Authenticate-Job CUPS-Get-Document" \

        cups/policy/default/limit/2/Require="user @OWNER @SYSTEM" \

        cups/policy/default/limit/2/Order="deny,allow" \

        cups/policy/default/limit/3="Pause-Printer Resume-Printer Set-Printer-Attributes Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After Cancel-Jobs CUPS-Add-Printer CUPS-Delete-Printer CUPS-Add-Class CUPS-Delete-Class CUPS-Accept-Jobs CUPS-Reject-Jobs CUPS-Set-Default" \

        cups/policy/default/limit/3/AuthType="Default" \

        cups/policy/default/limit/3/Require="user @SYSTEM" \

        cups/policy/default/limit/3/Order="deny,allow"


Idea from the customer:
In my opinion, the UCR commands should use "?" instead of "=" so that the (default) values are only set if the UCR variables do not yet exist.