Reason why some ACF2 resource rules should be resident

Products

• ACF2
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

Why do some ACF2 resource rules need to be made resident?

Resolution

There are 3 reasons why a resource type code should be made resident in ACF2:

1. Resource rules should be resident to increase performance.  If the rules are resident, no I/O is done to look up the access.  
2. FASTAUTH calls as documented by IBM cannot cause I/O on the system to occur so and SAF calls made with RACROUTE=FASTAUTH must be resident to be found by ACF2.  
3. Any resource rule keys using masking (Example: $KEY(********)) are required by ACF2 to have a resident directory built for them.  If none of the rule keys in a particular type code are masked, then the rule does not need to be resident.