Use of the files supplied in the GT.M distribution require READ and, usually, EXECUTE privileges. The VMSINSTAL procedure leaves the distribution files with READ and EXECUTE privileges for all users (WORLD). You may want to modify these protections if you want to restrict the use of GT.M.
The application executable images must be accessible to the users requiring them. Generally, you do this by granting the application images GROUP and/or WORLD classes with READ and EXECUTE access.
Ensure that database regions are designed with a granularity that permits you to implement your protection needs using ACLs or different UICs.
In a development environment, central source files are usually READ protected to the GROUP or WORLD, and WRITE and DELETE access are restricted to a librarian.
Other files used by your applications may require protection depending on the level of security you require.