The Check  *SECADM  Special Authority  command determines  if the  user
has the  special authority *SECADM.  Group  profile, supplemental group
profiles,  and  program adoption  authority are  also considered.   The
*SECADM special  authority is  needed for  various functions  involving
user profiles.

The command  will send CPF9898  as an escape  message if the  user does
not have *SECADM.  A simple version of the command would be:

             CHKSECADM
             MONMSG        MSGID(CPF9898) EXEC(DO)
               .
               .

This  would  check  that  the  current  user  has  the *SECADM  special
authority.

There is an  optional parameter ERRTXT  that allows you  to supply  the
message  text sent  for  the CPF9898  message.   This  is intended  for
situations  where you are using  a Standard Error  handling routine and
just want to bubble the message  back.  For example, assume PGMA  calls
PGMB and PGMB  contains CHKSECADM.   If PGMB contains a  standard error
handling routine, the error text would be sent to PGMA.

          CHKSECADM      ERRTXT('You must have *SECADM +
                          special authority to use the +
                          xxxx function')

If  the command completes  normally, the  error text  is not used.   If
the  user  is not  authorized,  the CPF9898  message  is sent  with the
error text provided.

There is no completion message if the user is authorized.

CHKSECADM can  be  useful if  a user  is to  make a  request  to use  a
function that  will require  changing a user  profile or  re-creating a
program  that adopts the owners  authority.  It allows  checking to see
if the function can be performed from a security viewpoint.

Note that if the check occurs  in an interactive job to check before  a
command is  submitted to batch,  the command does  not ensure  that the
user  will have  authority  in the  batch job.   Program  adopt  is not
passed to the  batch job.  You  should use CHKSECADM  in the batch  job
in addition.

Command parameters                                    *CMD
------------------

   ERRTXT        The error  text to be  used if an  error occurs.   The
                 default  is *STD which  produces standard  error text.

                 The  intent of  allowing you to  enter the  text is if
                 you are  using  the  CHKSECADM command  in  a  program
                 that  uses  a  standard   error  handling  routine  to
                 bubble  up the  message text to  the caller.   You can
                 supply some  specific text  relative to  the  function
                 of your program.

Restrictions
------------

None.

Prerequisites
-------------

The following TAA Tools must be on your system:

        SNDESCMSG      Send escape message

Implementation
--------------

None, the tool is ready to use.

Objects used by the tool
------------------------

   Object        Type    Attribute      Src member    Src file
   ------        ----    ---------      ----------    ----------

   CHKSECADM     *CMD                   TAASEEC       QATTCMD
   TAASEECC      *PGM       CLP         TAASEECC      QATTCL