Why should resource rules be resident?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

Question:

Why do we need to make resource rules resident in CA ACF2?

Answer:

Resource rules should be resident to increase performance.  If the rules are resident, no I/O is done to look up the access.  FASTAUTH calls as documented by IBM cannot cause I/O on the system to occur so and SAF calls made with RACROUTE=FASTAUTH must be resident to be found by CA ACF2.  Any resource rule keys using masking < $KEY(********) > are required by CA ACF2 to have a resident directory built for them.  If none of the rule keys in a particular type code are masked, then the rule does not need to be resident.

Environment

Release:
Component: ACF2MS