A user who is denied access to a remote printer by the Print System might attempt to write to the printer by opening a remote file at the printer. Both the CANDE and Transaction Server message control systems (MCSs) provide you with the ability to protect remote printers from such access.
CANDE
The following discussion applies to remote printers under the control of CANDE.
To protect a remote printer from being written to by a process that attempts to open the printer as a remote file, designate the ALLLOGIN and DIALLOGIN options of the CANDE ?OP command. When these options are specified, a remote file can be opened at the printer only when a user is logged on at the printer.
If the printer does not have a keyboard, ALLLOGIN and DIALLOGIN preclude the possibility of a user using the CANDE MCS to write to the printer as a remote file.
If the printer does have a keyboard, a user must log on before the file is opened. The log-on and the usercode are auditable.
The ?LAISSEZFILE command can also require user permission from a remote printer before the file is opened. For example, when ?LAISSEZFILE = 0 is specified for the system, the remote printer is notified when a process is trying to open a file on it, and permission is required from the remote printer before printing can begin.
For more information about ALLLOGIN, DIALLOGIN, ?LAISSEZFILE, and remote files, see Protecting Remote Files.
Transaction Server
When a process opens a file at a remote printer under the control of the Transaction Server MCS, Transaction Server creates a dynamic window for the remote printer. If the printer is described as INPUT/OUTPUT in the Network Information File (NIF), printing can occur at the remote printer only if an ?ON <window name> command is sent from the printer, specifying the dynamic window created by Transaction Server for the process that requested the remote-file open.
If the remote printer does not have a keyboard, a user cannot use the Transaction Server MCS to write to the printer as a remote file.
If the printer does have a keyboard, a user must log on and enter ?ON <window name> before printing begins. These are auditable actions.
For more information about Transaction Server and remote files, see Protecting Remote Files.
