From:	HENRY::IN%"engvax!PORTIA%CSVAX.CALTECH.EDU%SRI-KL.ARPA%relay.cs.net@rca.com" 21-SEP-1986 08:51
To:	cit-vax!info-vax@sri-kl.arpa
Subj:	summary of ways to restricting printing over decnet

>    ...We would like to restrict the copying of files to ... [a laser] printer
>    over DECnet or otherwise to charge the users properly. Does anyone have a
>    solution?
    
I submitted this question to the net a while back and have received many
suggestions so far, the most common suggestion being a variation of

$SET ACL/OBJ=DEV/ACL=(IDENT=user,ACCESS=NONE) txnn:

Unfortunately, ACL does NOT work on a spooled queue! I suppose this is a bug
that should be SPR'ed. However, we could do the following:

>... Just don't make the device spooled!
>The queues and associated commands will work just fine - all that won't work
>is copying directly to the device, which will always fail to allocate the
>device...Or, spool the device to a disk on which the DECnet default account 
>has no quota.  

 this can be set up, even though we don't enable quota currently.

> Or we could use proxy and/or get rid of the default decnet account.

> It has drawbacks:
>
>	- You have to disable ALL default access to the system or people
>		will just specify a null account (NODE""::) and avoid the
>		proxy;
>	- You have a lot of administrative overhead maintaining all those
>		accounts you might otherwise have never created.
>	- there are other reasons for keeping the default decnet account...

Thanks for all the suggestions.

-- Portia Bjorndahl	UUCP -- {allegra|ihnp4}!scgvaxd!engvax!portia
   Hughes Aircraft Co.	ARPA -- engvax!portia@csvax.caltech.edu
   (213) 616-2635