What is the difference between CAISEC.CIA_FILTER_MATCH and CAISEC.CIA_RESOURCE_MATCH?
The FILTER_MATCH function makes calls to the RESOURCE_MATCH function to return rows from the PERMXREF table in the data base.
FILTER_MATCH has some additional filtering logic that is needed by CA ACF2,
There is no additional filtering logic for CA Top Secret so it ends up that both functions should create the same output.
It was done this way since CIA was built as a common feature to both ESM products and the canned reports needed to process this way.
For sites running CA Top Secret, we recommend only using RESOURCE_MATCH directly, calling it from FILTER_MATCH is redundant and unnecessary.