grant codebase "file:./*" { permission javax.security.auth.AuthPermission "createLoginContext"; permission javax.security.auth.AuthPermission "modifyPrincipals"; permission javax.security.auth.AuthPermission "doAsPrivileged"; }; grant Principal NamePrincipal "np" { permission java.io.FilePermission "test.txt", "read"; };