System Administration Guide: Solaris Printing

Limiting User Access to a Printer by Using LP Print Commands

You can control which users can access some printers or all of the available printers. For example, you can prevent some users from printing on a high-quality printer to minimize expense. To restrict user access to printers, you create allow and deny lists by using the lpadmin -u command on the print server. Solaris Print Manager enables you to create only allow lists. If you create neither list, a printer is available to all users who can access the printer.

An allow list contains the names of users who are allowed access to the specified printer. A deny list contains the names of users denied access to the specified printer.

The rules for allow and deny lists are explained in the following table:

Allow and Deny List Rule 

User Consequence 

Do not create allow and deny lists. Or, if you leave both lists empty.

All users can access the printer. 

Specify all in the allow list.

All users can access the printer. 

Specify all in the deny list

All users, except root and lp user on the server, are denied access to the printer.

Make any entry in the allow list.

The deny list is ignored. Only users who are listed can access the printer.

Create a deny list, but you do not create an allow list or you leave the allow list empty.

Users who are listed in the deny list are denied access to the printer.

Because the print server is responsible for controlling access to the printer, allow and deny lists can only be created on the print server. If you create allow and deny lists, the print server will exclusively control user access to printers.

The following table lists the values that you can add to an allow list or a deny list to limit user access to a printer.

Table 5–5 Values for Allow and Deny Lists

Value for user-list

Description 

user

User on any system

all

All users on all systems 

none

No user on any system 

system!user

User on system only

!user

User on local system only

all!user

User on any system

all!all

All users on all systems 

system!all

All users on system

!all

All users on local system