code

    Specifies the category of protection to be assigned by default
    to all files subsequently created by the current process.
    To override this protection, you must specify an explicit
    protection using either the SET SECURITY /PROTECTION command
    or the /PROTECTION qualifier on the CREATE command. If you do not
    specify a protection code, the current default remains unchanged.

    The protection code is made up of the following components:

    o  Ownership category-system (S),  owner (O), group (G),  or
       world (W).  Each category can be abbreviated to its first
       character.

    o  Access category-Read (R),  write (W), execute (E),  or delete
       (D).  The access category is assigned to each ownership
       category. A null access specification means no access.

                                   NOTE

       Use the SET SECURITY/PROTECTION command to reset security
       characteristics of the directory or file.