[Pkg-cups-devel] Bug#369563: cups: won't delete jobs with AuthType Group

[Brian White]

Package: cupsys
Version: 1.1.23-10sarge1

I've been trying to get CUPS to allow cancelling of jobs via the web 
interface.  The browser would get an "client-error-forbidden" error and 
the log would show

   cancel_job "user" not authorized to delete job id ## owned by "other"

I tried using:

	<Location /jobs>
	AuthType Basic
	AuthClass Group
	AuthGroupName admin
	Order Deny,Allow
	Deny From All
	Allow From 127.0.0.0/24
	Allow From 10.0.1.2/16
	</Location>

But it didn't work.  I could see the jobs but not cancel them.  So I 
switched to the following...


	<Location /jobs>
	AuthType Basic
	AuthClass System
	Order Deny,Allow
	Deny From All
	Allow From 127.0.0.0/24
	Allow From 10.0.1.2/16
	</Location>

And that worked.  Only "AuthClass System" will honor the "admin" group.

                                           Brian
                                  ( bcwhite at precidia.com )

-------------------------------------------------------------------------------
     In theory, theory and practice are the same.  In practice, they're not.