attachment
<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Bill,<br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Jul. 24, 2018, at 2:32 PM, <a href="mailto:wamwagner@comcast.net" class="">wamwagner@comcast.net</a> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Michael,</div><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Thank you for your response. Perhaps I misunderstand, but in regard to your first comment, “Security attributes are not exposed as Job Description/Status/Template attributes …”, do you mean expose via a Het-Jobs or Get-Job-Attributes request? But in regard to this request, RFC 8011 says in with regard to both opertions:<o:p class=""></o:p></div><p class="MsoListParagraph" style="margin-right: 0in; margin-left: 0in; font-size: 11pt; font-family: Calibri, sans-serif;"> The IPP object ignores (does not respond with) any requested attribute or value which is not supported or which is restricted by the security policy in force, including whether the requesting user is the user that submitted the job (job originating user) or not (see<span class="Apple-converted-space"> </span><a href="https://tools.ietf.org/html/rfc2911#section-8" style="color: rgb(149, 79, 114); text-decoration: underline;" class=""><span style="color: rgb(149, 79, 114);" class="">section 8</span></a>). <span class="Apple-converted-space"> </span><span style="font-size: 10pt;" class=""><o:p class=""></o:p></span></p><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">Are Job Description attributes exposed in some other way?</div></div></div></blockquote><div><br class=""></div>Generally speaking, ALL Job Description attributes are available to the Job Owner and any authorized operators or administrators. Because IPP has never defined a formal ACL framework or (until my Privacy Attributes registration) a way to specify which attributes contain sensitive information that would be subject to the RFC 8011 "rules", we have explicitly specified that security credentials are not part of the public Job object attributes (even to the Job Owner), that they are passed as operation attributes and not Job Template attributes, and that they are not copied to Job Description or Job Status attributes. See:</div><div><br class=""></div><div>- PWG 5100.11 (JPS2): job-password and job-password-encryption</div><div>- PWG 5100.13 (JPS3): document-password</div><div>- PWG 5100.17 (SCAN): destination-accesses</div><div>- PWG 5100.18 (INFRA): document-access</div><div><br class=""><blockquote type="cite" class=""><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Menlo-Regular; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0in 0in 0.0001pt; font-size: 11pt; font-family: Calibri, sans-serif;" class="">With respect to remote reprint request, if a user is provided with the password, could he not also be provided with the name and/or location of the job? Might a Get-Jobs operation be adequate?</div></div></blockquote><div><br class=""></div></div>Typically job-name and job-printer-uri are treated as sensitive information and thus is not visible to ordinary users unless they are the Job Owner. The only attributes that RFC 8011 requires Get-Jobs to return are "job-id" and "job-uri".<div class=""><br class=""><div class="">
<div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Menlo; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; text-decoration: none;">_________________________________________________________<br class="">Michael Sweet, Senior Printing System Engineer</div>
</div>
<br class=""></div></body></html>