Security for printing check output from a log stream

If you use an IBM® Health Checker for z/OS® log stream to collect check output, you can use HZSPRINT to print the log stream data using one of the following HZSPRINT EXEC statement examples:

//  EXEC PGM=HZSPRINT,PARM='LOGSTREAM(logstreamname)'
                    OR
//  EXEC PGM=HZSPRINT,PARM='LOGSTREAM(logstreamname),CHECK(owner,name)'
                    OR
//  EXEC PGM=HZSPRINT,PARM='LOGSTREAM(logstreamname),CHECK(owner,name),EXCEPTIONS'

To authorize HZSPRINT users to log stream check output, you must define a profile in the LOGSTRM class for the log stream and assign READ access to users. When you assign access to the log stream for an HZSPRINT user, you give the user access to all check output in the log stream. HZSPRINT access to log streams is all or nothing - you cannot restrict HZSPRINT access to particular check owners or checks in log streams, as you can for check output in the message buffer.

The following profile example shows how you might define HZSPRINT access for a user ID to check output in a log stream:

RDEFINE FACILITY log_stream_data_set_name UACC(NONE)
PERMIT log_stream_data_set_name CLASS(LOGSTRM) ID(hcprint) ACCESS(READ)
SETROPTS CLASSACT(LOGSTRM)
SETROPTS RACLIST(LOGSTRM) REFRESH