What CA Access Control Audits in Full Enforcement Mode

In Full Enforcement mode (regular operation), CA Access Control logs events as follows:

If Warning mode is turned off for the intercepted resource, CA Access Control enforces rules and logs the events based on the audit property of the resource or user.

If Warning mode is turned on for the intercepted resource, a record is written to the audit log if an access request violates an access rule (if the rules were enforced, the request would have failed). The audit record mentions that the violation was permitted because Warning mode is in effect.
Rules are not enforced in this mode.