Why should resource rules be resident?

Document ID : KB000032125
Last Modified Date : 14/02/2018
Show Technical Document Details

Question:

Why do we need to make resource rules resident in CA ACF2?

Answer:

Resource rules should be resident to increase performance.  If the rules are resident, no I/O is done to look up the access.  FASTAUTH calls as documented by IBM cannot cause I/O on the system to occur so and SAF calls made with RACROUTE=FASTAUTH must be resident to be found by CA ACF2.  Any resource rule keys using masking < $KEY(********) > are required by CA ACF2 to have a resident directory built for them.  If none of the rule keys in a particular type code are masked, then the rule does not need to be resident.