Question:
Why do we need to make resource rules resident in CA ACF2?
Answer:
Resource rules should be resident to increase performance. If the rules are resident, no I/O is done to look up the access. FASTAUTH calls as documented by IBM cannot cause I/O on the system to occur so and SAF calls made with RACROUTE=FASTAUTH must be resident to be found by CA ACF2. Any resource rule keys using masking < $KEY(********) > are required by CA ACF2 to have a resident directory built for them. If none of the rule keys in a particular type code are masked, then the rule does not need to be resident.