1grant { 2 permission javax.security.auth.AuthPermission "createLoginContext.JMXPluggableAuthenticator"; 3 permission java.net.SocketPermission "*:*", "accept,connect,listen,resolve"; 4 permission java.lang.RuntimePermission "*"; 5 permission java.security.SecurityPermission "createAccessControlContext"; 6// permission javax.management.MBeanPermission "*", "getDomains"; 7 permission javax.management.MBeanPermission "SimpleStandard#State[MBeans:type=SimpleStandard]", "getAttribute"; 8 permission javax.security.auth.AuthPermission "getSubject"; 9 permission javax.management.MBeanPermission "SimpleStandard#State[MBeans:type=SimpleStandard]", "setAttribute"; 10 permission javax.management.MBeanPermission "SimpleStandard#-[MBeans:type=SimpleStandard]", "addNotificationListener"; 11 permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "addNotificationListener"; 12 permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "removeNotificationListener"; 13 permission javax.management.MBeanPermission "SimpleStandard#-[MBeans:type=SimpleStandard]", "unregisterMBean"; 14 permission javax.management.remote.SubjectDelegationPermission "javax.management.remote.JMXPrincipal.delegate"; 15}; 16 17grant principal javax.management.remote.JMXPrincipal "monitorRole" { 18 permission javax.management.remote.SubjectDelegationPermission "javax.management.remote.JMXPrincipal.delegate"; 19}; 20 21grant principal javax.management.remote.JMXPrincipal "delegate" { 22 permission javax.management.MBeanPermission "*", "getDomains"; 23 permission javax.management.MBeanPermission "SimpleStandard#State[MBeans:type=SimpleStandard]", "getAttribute"; 24 permission javax.security.auth.AuthPermission "getSubject"; 25 permission javax.management.MBeanPermission "SimpleStandard#State[MBeans:type=SimpleStandard]", "setAttribute"; 26 permission javax.management.MBeanPermission "SimpleStandard#-[MBeans:type=SimpleStandard]", "addNotificationListener"; 27 permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "addNotificationListener"; 28 permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "removeNotificationListener"; 29 permission javax.management.MBeanPermission "SimpleStandard#-[MBeans:type=SimpleStandard]", "unregisterMBean"; 30}; 31