Syntax options:
PROTECTION IS ANSI | PROTECTION IS ACLS
Specifies whether the database root file will be invoked with
ACL-style or ANSI/ISO-style privileges. If no protection clause
is specified, the default is ACL-style privileges.
For ACL-style databases, the access privilege set is order-
dependent. When a user tries to perform an operation on a
database, SQL reads the associated access privilege set, called
the access control list (ACL), from top to bottom, comparing
the identifier of the user with each entry. As soon as SQL finds
a match, it grants the rights listed in that entry and stops
the search. All identifiers that do not match a previous entry
"fall through" to the entry [ *,*] (equivalent to the SQL keyword
PUBLIC). The default access for PUBLIC is NONE.
See the GRANT statement and the REVOKE statement for more
information on ACL-style privileges.
For ANSI/ISO-style databases, the access privilege set is
not order-dependent. The user matches the entry in the access
privilege set; gets whatever privileges have been granted on the
database, table, or column; and gets the privileges defined for
PUBLIC. A user without an entry in the access privilege set gets
only the privileges defined for PUBLIC. There is always an access
privilege entry for PUBLIC, even if that entry has no access to
the database, table, or column.
ANSI/ISO-style databases grant access to the creator when an
object is created. Because only the creator is granted access
to the newly created object, additional access must be granted
explicitly.
See the GRANT_ANSI statement and the REVOKE_ANSI statement for
more information on ANSI/ISO-style privileges.
You can change the PROTECTION IS parameter by using the IMPORT
statement. See the IMPORT statement for more information.