/PROTECTION=keyword Specifies the protection code to be assigned to the volume. The following table describes the keywords for this qualifier: Keyword Description protection Specifies the protection code according to code the standard syntax rules for specifying user protection (that is, system/owner/group/world). If you omit a protection category, that category of user is denied all access. If you do not specify a protection code, the default is the protection that was assigned to the volume when it was initialized. XAR Enables enforcement of the extended record attribute (XAR) access controls. For more information about XAR, see the OpenVMS Record Management Services Reference Manual. DSI Enables XAR permissions Owner and Group for XARs containing Digital System Identifiers (DSI). For more information, see the OpenVMS Record Management Services Reference Manual. If you specify the /PROTECTION qualifier when you mount a volume with the /SYSTEM or /GROUP qualifier, the specified protection code overrides any access rights implied by the other qualifiers. If you specify the /FOREIGN qualifier, the execute (E) or create (C) and delete (D) access codes are synonyms for logical I/O (L) and physical I/O (P). You can, however, specify the access codes physical I/O (P) or logical I/O (L), or both, to restrict the nature of input/output operations that different user categories can perform. To use the /PROTECTION qualifier on a Files-11 volume, you must have the user privilege VOLPRO or your UIC must match the UIC written on the volume. Example The following command mounts a device labeled WORKDISK on DKA1 and assigns a protection code. Access to the volume will be read, write, and create for system users; read, write, create, and delete for owner; read and create for group users; and read-only for users in the world category. $ MOUNT/PROTECTION=(SYSTEM:RWE,O:RWED,G:RE,W:R) DKA1: WORKDISK