To set permissions on a PDF document, you must specify a newOwnerPassword. Conversely, you cannot set the newOwnerPassword without also setting the permissions attribute. Only an owner can change permissions or add passwords. For a list of permissions that an owner can set for PDF documents, see cfpdf in the CFML Reference.
Except for all or none, owners can specify a comma-separated list of permissions on a document, as the following example shows:
<cfpdf action="protect" permissions="AllowinPrinting,AllowDegradedPrinting,AllowSecure" source="timesheet.pdf" newOwnerPassword="private" newUserPassword="openSesame" destination="myTimesheet.pdf">
In this example, a user must enter the password openSesame before opening the PDF form. All users can print the document at any resolution, but only the owner can modify the document or change the permissions.