Printing

The security.printing node is the print control plane: it intercepts the print dialog, generates a PDF on the server, and delivers it to the browser for local printing. The default and recommended behaviour is PDF-only output, with physical printers off.

Editor Printing accordion · JSON security.printing

How print-to-PDF works

When an application prints, WebStream captures the job, renders it to a PDF on the host, and presents it as a download in the user's browser. This keeps a clean, auditable boundary: documents are produced as files the user explicitly downloads, and every print event is recorded in the audit trail.

Properties

Property	Type	Default	Min / max	Notes
`enabled` *	boolean	—	—	Allow printing, server-side PDF generation and delivery to the browser. Required.
`allowPhysicalPrinters`	boolean	false	—	When `false`, only Microsoft Print to PDF is permitted. Set `true` to expose physical printers.
`maxOutputSizeBytes`	integer \| null	null	1 – 1,073,741,824	Cap on the delivered print PDF size, in bytes. Independent of data transfer; omit (`null`) to fall back to `security.dataTransfer.maxFileSizeBytes`.

Relationship to data transfer

Printing is independent of client upload/download. A user can be blocked from downloading files yet still allowed to print to PDF, and vice versa. The PDF size cap is its own setting: if maxOutputSizeBytes is null, the effective cap is the data-transfer file-size limit. In the editor, the PDF size field lives in the Client Data Transfer accordion even though it belongs to security.printing.

Sample

"printing": {
  "enabled": true,
  "allowPhysicalPrinters": false,
  "maxOutputSizeBytes": null
}

What gets audited

Print events appear in the audit trail with the document output, so security and compliance teams can see what was printed and when. See Audit Events.

Note

From the user's perspective, printing produces a PDF they can save or share. See Printing in the End User Guide. PDF generation timeout is an operational setting in app.config.xml (<printing>), not part of the policy.