HP Distributed Print Service Administration Guide

230 Chapter8
Managing DCE Security for HPDPS
Determining Appropriate DCE Permissions for HPDPS User Groups
End Users This group needs to be able to print jobs, modify their
own jobs, cancel their own jobs, and query HPDPS
objects. If most printers will be available to all users,
and if all printer functions will be available to all users,
then users do not need to log in to DCE. When you do
not restrict a printer, a user does not have to log in to
DCE to submit, modify, query, and cancel jobs. Users
who print from other platforms, such as Windows,
cannot print to restricted printers. However, if you
restrict a logical printer and assign a group to it with
read permission, a user must be a member of that
group to submit jobs to the logical printer.
NOTE See “Planning a Printer Operator Group” shortly for instructions on
creating a new printer operator group with appropriate permissions. The
steps for planning and creating a new system operator group are similar,
except that they apply to queues and spoolers. The steps for planning
and creating a new administrator group also are similar.
For instructions on creating a group for users of restricted printers, see
“Planning a Group for People Who Will Use Restricted Printers” shortly.
When you have created the appropriate groups, refer to the DCE
documentation to add users to the groups; see “DCE Documentation”
earlier.