1.CDO>  CHANGE PROTECTION FOR RECORD
      cont> PAYROLL, PROMOTION [JONES]+INTERACTIVE
      cont>   ACCESS CONTROL+READ.

      In this example, the CHANGE PROTECTION command affects the
      access rights for the PAYROLL and PROMOTION record elements.
      CDO locates the ACE containing [JONES]+INTERACTIVE identifiers
      and adds additional CONTROL and READ access rights.

    2.CDO>  CHANGE PROTECTION FOR FIELD
      cont> EMP_DATE POSITION 3 ACCESS NOALL+READ.

      In this example, the CHANGE PROTECTION command affects the
      access rights for the EMP_DATE field element. CDO locates the
      third ACE in the field's ACL and removes all access rights
      except READ access.

    3.CDO> CHANGE PROTECTION FOR RECORD SALARY ACCESS NONE.

      In this example, the CHANGE PROTECTION command changes the
      first ACE in the ACL for the SALARY record element. After
      the command executes, the users whose identifiers match the
      identifiers in the first ACE will not have access to the SALARY
      record element.

    4.CDO>  CHANGE PROTECTION FOR REPOSITORY PERSONNEL
      cont>   POSITION 3 DEFAULT_ACCESS READ+NOWRITE+CONTROL.
      CDO>  DEFINE FIELD NEW_FIELD DATATYPE TEXT SIZE 5.

      In this example, the CHANGE PROTECTION command changes
      the default access rights for the PERSONNEL repository to
      READ+NOWRITE+CONTROL. If a context has not been set, CDO will
      then grant the newly created field, NEW_FIELD, with access
      rights that are equivalent to these repository default access
      rights.