22.7. Module Access Control

It is often useful to give a user the rights to view print queues and delete jobs, but not create or edit printers. This can be done using the Webmin users module, once you have created a user with access to the Printer Configuration module or edited an existing user to give him access. Chapter 52 explains how to do this in more detail.

Once a user with access to the module exists, you can limit which printers he can manage and what he can do to them by following these steps:

1.
In the Webmin Users module, click on Printer Administration next to the name of the user or group.

2.
Set the field Can edit module configuration? to No, so the user cannot change the print system or paths to configuration files.

3.
You can limit the printers for which a user can edit the destination, driver, and other attributes by changing the Printers this user can configure field to Selected and choosing them from the list. This will not stop him from managing jobs on those printers though—the option in Step 4 controls that.

To prevent the user from managing any printers, choose Selected, but do not select any printers from the list. Be aware that a user who can edit or create a printer can gain root access by specifying his own driver program (which is typically run as root), or having the printer write to a system file such as /etc/passswd.

4.
To limit the printers on which the user can manage print jobs, change the Can cancel print jobs? field to Only on selected printers and choose them from the list below. Or, select No to stop him from canceling or viewing the contents of jobs on any printer.

5.
It is also possible to further restrict the jobs that can be managed using the Manage print jobs owned by field. By default, jobs submitted by any user on allowed printers can be cancelled. If the last option in this field is selected and a username entered into the field next to it, however, only jobs owned by that user can be managed.

You can also select the Current Webmin user option, which will limit the user to jobs submitted by a UNIX user with the same name as the Webmin user.

6.
To prevent the Webmin user from creating new printers, set the Can add new printers? option to No. This should be done if he is not allowed to edit existing printers.

7.
Because there is no reason why the user should need to stop or restart the scheduled print process, change the Can stop or start scheduler? field to No.

8.
To hide printers on the main page on which the user is not allowed to edit or manage print jobs, set the Show non-configurable printers? option to No.

9.
To stop the user from printing pages through Webmin, change the Can print test pages? option to No.

10.
Finally, click the Save button to have your new restrictions activated.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
3.22.249.220