[IPP] Another updated stable draft of IPP Reprint Password postedfor review

[IPP] Another updated stable draft of IPP Reprint Password postedfor review

wamwagner at comcast.net wamwagner at comcast.net
Mon Jul 23 18:53:07 UTC 2018


Greetings,
Some comments on this draft, largely prompted by observations during the last IPP conference.  Sorry about the wordiness.

Comments made based on my understanding (or misunderstanding) of this proposed element, as it has evolved. 

1. The function of this password is to control access to a retained job. As evolved, it has been maintained that access is only for printing the job and access (as far as IPP is concerned) is only from a console on which the retained job is stored. [There might, one would assume, be non-IPP mechanisms, such as a remote console, or out-of-band communications whereby a user could request access to a job stored elsewhere,  but once a job is tagged with a Job Reprint Password, access to the stored by someone not normally having access should require submission of the Job Reprint Password defined when the job was created.]
2. I would argue that this should be a Job Description attribute rather than an Operation attribute, because it stays with the Job and is really an attribute of the job rather than any IPP operation. I also suggest that this attribute should not in itself cause Job Save, since IPP already has the “job-save-disposition” (collection) Job Template attribute and there are other implementation dependent job retention factors. This would also preclude the automatic saving of copied jobs.
3. It may be desirable to make clear the distinction between Job Password, Document Password and Job Reprint Password in this specification. I would suggest a simple statement of the purpose of these three passwords.
a. document-password [PWG5100.13] is an operation attribute provided with a Print-Job, Print-URI, Send-Document, or Send-URI operation to allow access to the document content, typically to "unlock" a previously password-protected PDF or OpenXPS document. The value supplied is  retained by the Printer as long as the corresponding Document is retained.
b. job-password [PWG5100.11] is an operation attribute optionally provided with a Print-Job, Print-URI, or Create-Job operation to cause a submitted job to be held in a 'pending-held' state until the password value is submitted to the printing device. The method in which the password is entered and validated at the Printer is implementation dependent. The job-password value is not saved with the Job.
c. job-reprint-password is [a Job Description or an operation attribute] optionally provided with a Print-Job, Print-URI, or Create-Job operation that (if accepted by the Printer), causes the submitted job-reprint-password to be saved with the retained Job. It does not affect the processing of the job in any other way. Although IPP does allow a retained job to be reprinted via Resubmit-Job, this capability is only available if the user performing this operation is the job owner or an operator or administrator of the Printer object. However, if outside of IPP, the Printer provides a user with the ability to reprint retained jobs, and the desired Job has been tagged with a job-reprint-password, the user must supply that password to get access to the job for reprint (or any other purpose?)
4. As far as I can tell, reprinting a job is not a defined IPP operation nor is it clear to me why giving access to an IPP retained Job by some means other than IPP can restrict how that job is used. At any rate, from the discussion, the identified job (which is somehow selected by the user) is not itself affected in any way other than by being copied and, since "most operation attributes do not persist beyond the life of the operation" that new job is printed (whatever than might involve) following operation attributes defined by the user when he has, by whatever means outside of IPP, initiated "reprint" of a selected IPP job. 
5. The original use case of allowing remote reprint was eliminated, although if the purpose of Job Reprint Password is solely to allow access to a retained IPP Job, (rather than to act as a Job Password for a reprinted Job), it would seem that remote reprint is a useful feature. Would it be that cumbersome to change an operation such as ResubmitJob to bestow job ownership  (of the copied Job) to a user having the password? 
Thanks, Bill Wagner



From: Kennedy, Smith (Wireless & Standards Architec)
Sent: Wednesday, June 20, 2018 2:06 PM
To: PWG IPP WG Reflector
Subject: [IPP] Another updated stable draft of IPP Reprint Password postedfor review

Greetings,

I have posted another update to IPP Reprint Password. It is available here:

   https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ippreprintpwd-20180620.pdf
   https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ippreprintpwd-20180620.odt
   https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ippreprintpwd-20180620-rev.pdf
   https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ippreprintpwd-20180620-rev.odt

Changes in this revision include:
• Added a figure to section 3, and moved the section 4 preamble text added in the 2018-06-19 revision to be in section 3

Cheers!

Smith

/**
   Smith Kennedy
   Wireless & Standards Architect - IPG-PPS
   Standards - IEEE ISTO PWG / Bluetooth SIG / Wi-Fi Alliance / NFC Forum / USB-IF
   Chair, IEEE ISTO Printer Working Group
   HP Inc.
*/




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.pwg.org/pipermail/ipp/attachments/20180723/af6ffabb/attachment.html>


More information about the ipp mailing list