Library /sys$common/syshlp/SQL$HELP_OLD72.HLB  —  CREATE  DATABASE  Arguments  PROTECTION
    Syntax options:

    PROTECTION IS ANSI | PROTECTION IS ACLS

    Specifies whether the database root file will be invoked with
    ACL-style or ANSI/ISO-style privileges. If no protection clause
    is specified, the default is ACL-style privileges.

    For ACL-style databases, the access privilege set is order-
    dependent. When a user tries to perform an operation on a
    database, SQL reads the associated access privilege set, called
    the access control list (ACL), from top to bottom, comparing
    the identifier of the user with each entry. As soon as SQL finds
    a match, it grants the rights listed in that entry and stops
    the search. All identifiers that do not match a previous entry
    "fall through" to the entry [ *,*] (equivalent to the SQL keyword
    PUBLIC). The default access for PUBLIC is NONE.

    See the GRANT statement and the REVOKE statement for more
    information on ACL-style privileges.

    For ANSI/ISO-style databases, the access privilege set is
    not order-dependent. The user matches the entry in the access
    privilege set; gets whatever privileges have been granted on the
    database, table, or column; and gets the privileges defined for
    PUBLIC. A user without an entry in the access privilege set gets
    only the privileges defined for PUBLIC. There is always an access
    privilege entry for PUBLIC, even if that entry has no access to
    the database, table, or column.

    ANSI/ISO-style databases grant access to the creator when an
    object is created. Because only the creator is granted access
    to the newly created object, additional access must be granted
    explicitly.

    See the GRANT_ANSI statement and the REVOKE_ANSI statement for
    more information on ANSI/ISO-style privileges.

    You can change the PROTECTION IS parameter by using the IMPORT
    statement. See the IMPORT statement for more information.
Close Help