Principals are shown in the Principal area.  Rights and flags
  associated with each principal are shown to the right of each
  principal.

  Principals

  The principal is made up of three parts:

      The individual or group icon
      The Default (D) flag

      The principal name

  Note that the default flag cannot be modified, because the
  principal is really the combination of the default flag and the
  principal name.  You cannot clear the default flag; you must
  remove the ACE, then add a new ACE that does not have
  the default flag set.  This isn't usually a problem, because the
  ACS usually contains a default and a non-default ACE for
  the same principal.

  Rights and Flags

  The DECdns access rights are Read (R), Write (W), Delete
  (D), Test (T), and Control (C). The DECdns flags are
  Propagate (P) and Group (G). Double-click on the right
  or flag you want more information about.

            R     W     D     T     C     P     G

  Each right has a slightly different meaning, depending on the
  kind of name with which it is associated.  Double-click on the
  type of entity you want to see a summary of access rights for
  and a description of the operations they enable a principal to
  perform.

   Clearinghouse       Directory      Object Entry/Soft Link

  If you click on the Locked button, it changes to Editable, indi-
  cating that you can modify the rights for that principal.  After
  you make changes, click on the Editable button to lock it once
  again.