How to Restrict Printer Access Using Lion Server CUPS Web Interface
When you first share a printer in Lion Server, all users on your local network can use it by default. You can restrict access to certain users and groups by using System Preferences or by using the Common Unix Printing System (CUPS) web interface.
Using CUPS to restrict access to printers takes a few more clicks and requires some typing than does System Preferences, but it does give you a little more flexibility than System Preferences provides. Follow these steps:
Open a web browser and go to the CUPS web interface.
Use these URLs if you’re logged into the server Mac that is hosting the printing.
If you’re accessing your server from another computer, use instead a URL in this form: http://server-ip-address:631, where server-ip-address is the IP address of the server on which you have printer sharing enabled.
Click the Printers tab (or Class tab for printer pools) and select a printer (or class).
Choose Select Allowed Users from the Administration pop-up menu.
A page called Allowed Users for printername appears.
At the bottom of the page, select either Allow These Users to Print or Prevent These Users from Printing.
Here’s the extra flexibility that you don’t get with System Preferences: By using Prevent These Users from Printing, you can easily give access to everyone except for a few people or groups. The drawback is that you have to type them.
Type the names of users and groups in the Users field, separating them with a comma and a space, and then click the Set Allowed Users button.