ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Why should resource rules be resident?


Article ID: 32125


Updated On:


ACF2 ACF2 - DB2 Option ACF2 for zVM ACF2 - z/OS ACF2 - MISC PanApt PanAudit



Why do we need to make resource rules resident in CA ACF2?


Resource rules should be resident to increase performance.  If the rules are resident, no I/O is done to look up the access.  FASTAUTH calls as documented by IBM cannot cause I/O on the system to occur so and SAF calls made with RACROUTE=FASTAUTH must be resident to be found by CA ACF2.  Any resource rule keys using masking < $KEY(********) > are required by CA ACF2 to have a resident directory built for them.  If none of the rule keys in a particular type code are masked, then the rule does not need to be resident.


Component: ACF2MS