An access right to be granted or denied to the user identified
    by UIC. The new version of the ACL entry you create with the
    CHANGE PROTECTION statement does not inherit any characteristics
    from the old version. When you change protection on a database
    element, you need to specify the entire entry, including all the
    access rights you want to deny.

    Request HELP on Access_rights to see a complete table of Oracle Rdb
    access rights.