An ACF00109 message appears when attempting to change a user's access for a new site defined field in the LID record:
ACF00109 INVALID OPERATION REQUESTED FOR FIELD xxxxxx
A list of the LID attempting to make the change shows that the user has unscoped SECURITY privileges.
Verify the @CFDE PRTN field of the new site defined field. If the new site defined field is a BIT field, then the PRTN of the @CFDE macro for this field should be PRTN=3. This indicates that the processing routine used for the field is for a SWITCH field which is the processing routine that corresponds to the TYPE=BIT field in the @CFDE entry.
For more information on TYPE and PRTN fields in the @CFDE macro, please see the ACF2 Documentation section CFDE - Create Field Definition Entry Macro