Need to give access to a co-worker to cancel print jobs.

[Reynaldo Torres]

Please, I need to know, if you can help me to allow a co-worker to cancel print jobs that are not needed any more using the "cancel" commnad from his home account. I want him to be able to cancel a set of print jobs at one time from the "printq" using the following command "cancel -e b18l_hp4_01" but when he does it from his home directory it saids. He needs root access and I don't want him to have root access. I would like to know how could I set him to have privilege to use this command without root access. When I do it from root I have no problem, it's done instantly. Please advise which way should I go with this matter.

Thank you in advance.

RT

[Ken Hubnik_2]

Try using sudo

Sudo allows a permitted user to execute a command as the superuser.
Sudo determines who is an authorized user by consulting the file
/etc/sudoers. The -V flag will print the version of sudo/visudo you
are running. Sudo will prompt for a user's password to initiate a
validation period of N minutes (where N is defined at installation
time and defaults to 5 minutes). By giving sudo the -v flag a user
can update the time stamp without running a command. The password
prompt itself will also time out if the password is not entered with N
minutes (again, this is defined at installation time and defaults to 5
minutes).

[Jeff Schussele · Accepted solution]

Hi Reynaldo,

The same functionality can be achieved by giving the user restricted sam privileges.
Basically you just invoke sam using -r & designate the subset of it's functionality to a user or group.
Then when that user or group member runs sam all they see is what was granted to them.

Do a man sam for further details.

Rgds,
Jeff

[Victor_5]

Another way is just create a user, let's say "co-worker", then join "co-worker" into "lp" group, you can use sam to do so, after that, "co-worker" can do lpstat, cancel, disable and enable.