Why should resource rules be resident?

Document ID : KB000032125
Last Modified Date : 14/02/2018
Show Technical Document Details


Why do we need to make resource rules resident in CA ACF2?


Resource rules should be resident to increase performance.  If the rules are resident, no I/O is done to look up the access.  FASTAUTH calls as documented by IBM cannot cause I/O on the system to occur so and SAF calls made with RACROUTE=FASTAUTH must be resident to be found by CA ACF2.  Any resource rule keys using masking < $KEY(********) > are required by CA ACF2 to have a resident directory built for them.  If none of the rule keys in a particular type code are masked, then the rule does not need to be resident.