1grant codebase "file:/-" {
2    permission javax.security.auth.AuthPermission "createLoginContext.JMXPluggableAuthenticator";
3    permission java.net.SocketPermission "*:*", "accept,connect,listen,resolve";
4    permission java.security.SecurityPermission "createAccessControlContext";
5    permission java.lang.RuntimePermission "*";
6    permission javax.management.MBeanPermission "*", "getDomains";
7    permission javax.management.MBeanPermission "SimpleStandard#State[MBeans:type=SimpleStandard]", "getAttribute";
8    permission javax.security.auth.AuthPermission "getSubject";
9    permission javax.management.MBeanPermission "SimpleStandard#State[MBeans:type=SimpleStandard]", "setAttribute";
10    permission javax.management.MBeanPermission "SimpleStandard#-[MBeans:type=SimpleStandard]", "addNotificationListener";
11    permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "addNotificationListener";
12    permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "removeNotificationListener";
13    permission javax.management.MBeanPermission "SimpleStandard#-[MBeans:type=SimpleStandard]", "unregisterMBean";
14};
15
16grant principal javax.management.remote.JMXPrincipal "monitorRole" {
17    permission javax.management.MBeanPermission "*", "getDomains";
18    permission javax.management.MBeanPermission "SimpleStandard#State[MBeans:type=SimpleStandard]", "getAttribute";
19    permission javax.security.auth.AuthPermission "getSubject";
20    permission javax.management.MBeanPermission "SimpleStandard#State[MBeans:type=SimpleStandard]", "setAttribute";
21    permission javax.management.MBeanPermission "SimpleStandard#-[MBeans:type=SimpleStandard]", "addNotificationListener";
22    permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "addNotificationListener";
23    permission javax.management.MBeanPermission "javax.management.MBeanServerDelegate#-[JMImplementation:type=MBeanServerDelegate]", "removeNotificationListener";
24    permission javax.management.MBeanPermission "SimpleStandard#-[MBeans:type=SimpleStandard]", "unregisterMBean";
25};
26