Syntax options: PROTECTION IS ANSI | PROTECTION IS ACLS Specifies whether the database root file will be invoked with ACL-style or ANSI/ISO-style privileges. If no protection clause is specified, the default is ACL-style privileges. For ACL-style databases, the access privilege set is order- dependent. When a user tries to perform an operation on a database, SQL reads the associated access privilege set, called the access control list (ACL), from top to bottom, comparing the identifier of the user with each entry. As soon as SQL finds a match, it grants the rights listed in that entry and stops the search. All identifiers that do not match a previous entry "fall through" to the entry [ *,*] (equivalent to the SQL keyword PUBLIC). The default access for PUBLIC is NONE. See the GRANT statement and the REVOKE statement for more information on ACL-style privileges. For ANSI/ISO-style databases, the access privilege set is not order-dependent. The user matches the entry in the access privilege set; gets whatever privileges have been granted on the database, table, or column; and gets the privileges defined for PUBLIC. A user without an entry in the access privilege set gets only the privileges defined for PUBLIC. There is always an access privilege entry for PUBLIC, even if that entry has no access to the database, table, or column. ANSI/ISO-style databases grant access to the creator when an object is created. Because only the creator is granted access to the newly created object, additional access must be granted explicitly. See the GRANT_ANSI statement and the REVOKE_ANSI statement for more information on ANSI/ISO-style privileges. You can change the PROTECTION IS parameter by using the IMPORT statement. See the IMPORT statement for more information.