Comment # 8 on bug 936309 from Johannes Meixner

It seems since CUPS > 1.5.4 the "All" wildcard value must specified
separatedly to avoid that clients like "lpstat -p" just hang up:
-----------------------------------------------------------------------------
<Policy allowallforanybody>
  JobPrivateAccess all
  JobPrivateValues none
  SubscriptionPrivateAccess all
  SubscriptionPrivateValues none
  <Limit Validate-Job Cancel-Jobs Cancel-My-Jobs Close-Job CUPS-Get-Document>
    Order deny,allow
    Allow from all
  </Limit>
  <Limit All>
    Order deny,allow
    Allow from all
  </Limit>
</Policy>
DefaultPolicy allowallforanybody
-----------------------------------------------------------------------------

Reinhard Hennig,
please test if the above policy really works for you.