Why should resource rules be resident?

book

Article ID: 32125

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - DB2 Option CA ACF2 for zVM CA ACF2 - z/OS CA ACF2 - MISC CA PanApt CA PanAudit

Issue/Introduction

Question:

Why do we need to make resource rules resident in CA ACF2?

Answer:

Resource rules should be resident to increase performance.  If the rules are resident, no I/O is done to look up the access.  FASTAUTH calls as documented by IBM cannot cause I/O on the system to occur so and SAF calls made with RACROUTE=FASTAUTH must be resident to be found by CA ACF2.  Any resource rule keys using masking < $KEY(********) > are required by CA ACF2 to have a resident directory built for them.  If none of the rule keys in a particular type code are masked, then the rule does not need to be resident.

Environment

Release:
Component: ACF2MS