######################################################################

#     Default Access Control File for Remote JMX(TM) Monitoring

######################################################################

#

# Access control file for Remote JMX API access to monitoring.

# This file defines the allowed access for different roles.  The

# password file (jmxremote.password by default) defines the roles and their

# passwords.  To be functional, a role must have an entry in

# both the password and the access files.

#

# (See that file for details)

#

# The file format for password and access files is syntactically the same

# as the Properties file format.  The syntax is described in the Javadoc

# for java.util.Properties.load.

# Typical access file has multiple  lines, where each line is blank,

# a comment (like this one), or an access control entry.

#

# An access control entry consists of a role name, and an

# associated access level.  The role name is any string that does not

# itself contain spaces or tabs.  It corresponds to an entry in the

# password file (jmxremote.password).  The access level is one of the

# following:

#       "readonly" grants access to read attributes of MBeans.

#                   For monitoring, this means that a remote client in this

#                   role can read measurements but cannot perform any action

#                   that changes the environment of the running program.

#       "readwrite" grants access to read and write attributes of MBeans,

#                   to invoke operations on them, and to create or remove them.

#                   since they can potentially interfere with the smooth

#

# A given role should have at most one entry in this file.  If a role

# has no entry, it has no access.

# If multiple entries are found for the same role name, then the last

# access entry is used.

#

#

# Default access control entries:

# o The "controlRole" role has readwrite access.

#

# monitorRole   readonly

# controlRole   readwrite

guest   readonly

admin   readwrite