--- cups-1.3.7/conf/cupsd.conf.in.orig	2008-07-08 12:11:01.000000000 +0200
+++ cups-1.3.7/conf/cupsd.conf.in	2008-07-08 13:11:57.000000000 +0200
@@ -78,6 +78,55 @@
   </Limit>
 </Policy>
 
+DefaultPolicy default
+
+# easy is a very relaxed policy
+<Policy easy>
+  # Job-related operations must be done by the owner or an administrator...
+  <Limit All>
+    Satisfy any
+    Order allow,deny
+  </Limit>
+</Policy>
+
+# paranoid is a very restricted policy
+<Policy paranoid>
+  # Job-related operations must be done by the owner
+  <Limit Send-Document Send-URI Hold-Job Release-Job Restart-Job Purge-Jobs Set-Job-Attributes Create-Job-Subscription Renew-Subscription Cancel-Subscription Get-Notifications Reprocess-Job Cancel-Current-Job Suspend-Current-Job Resume-Job CUPS-Move-Job>
+    Require user @OWNER
+    Allow from 127.0.0.0/8
+    Order deny,allow
+  </Limit>
+  # All administration operations require an administrator to authenticate...
+  <Limit CUPS-Add-Modify-Printer CUPS-Delete-Printer CUPS-Add-Modify-Class CUPS-Delete-Class CUPS-Set-Default>
+    AuthType Default
+    Require user @SYSTEM
+    Allow from 127.0.0.0/8
+    Order deny,allow
+  </Limit>
+
+  # All printer operations require a printer operator to authenticate...
+  <Limit Pause-Printer Resume-Printer Enable-Printer Disable-Printer Pause-Printer-After-Current-Job Hold-New-Jobs Release-Held-New-Jobs Deactivate-Printer Activate-Printer Restart-Printer Shutdown-Printer Startup-Printer Promote-Job Schedule-Job-After CUPS-Accept-Jobs CUPS-Reject-Jobs>
+    AuthType Default
+    Require user @CUPS_DEFAULT_PRINTADMIN_AUTH@
+    Allow from 127.0.0.0/8
+    Order deny,allow
+  </Limit>
+
+  # Only the owner or an administrator can cancel or authenticate a job...
+  <Limit Cancel-Job CUPS-Authenticate-Job>
+    Require user @OWNER
+    Allow from 127.0.0.0/8
+    Order deny,allow
+  </Limit>
+
+  <Limit All>
+    Require user @OWNER @CUPS_DEFAULT_PRINTADMIN_AUTH@
+    Allow from 127.0.0.0/8
+    Order deny,allow
+  </Limit>
+</Policy>
+
 #
 # End of "$Id: cupsd.conf.in 7199 2008-01-08 00:16:30Z mike $".
 #