Or you can just delete out the operations that you want to allow- or just delete the whole section in that cupsd.conf file- that's what we did.