grant codebase "file:${org.apache.river.jsk.home}${/}lib${/}phoenix.jar" {
    permission java.security.AllPermission "", "";
};

grant codebase "file:${org.apache.river.jsk.home}${/}lib${/}jsk-platform.jar" {
    permission java.security.AllPermission "", "";
};

grant codebase "file:${org.apache.river.jsk.home}${/}lib${/}jsk-lib.jar" {
    permission java.security.AllPermission "", "";
};

grant codebase "file:${org.apache.river.qa.harness.harnessJar}
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";

};

grant codebase "file:${org.apache.river.qa.harness.testJar}
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";

};

// not sure the following is necessary, but just in case
grant codebase "file:${org.apache.river.qa.home}${/}lib${/}qa1-jini-latest.jar"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";

};

grant {
      permission org.apache.river.phoenix.ExecOptionPermission "*";
    // for a start test
      permission org.apache.river.phoenix.ExecPermission "/bin/javax";
};


//X500 Principals
grant principal javax.security.auth.x500.X500Principal "CN=Fiddler"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};

grant principal javax.security.auth.x500.X500Principal "CN=Mahalo"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};

grant principal javax.security.auth.x500.X500Principal "CN=Mercury"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};

grant principal javax.security.auth.x500.X500Principal "CN=Outrigger"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};

grant principal javax.security.auth.x500.X500Principal "CN=Reggie"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};

grant principal javax.security.auth.x500.X500Principal "CN=Norm"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};


grant principal javax.security.auth.x500.X500Principal "CN=Phoenix"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";

};

//Kerberos policy grants
grant principal javax.security.auth.kerberos.KerberosPrincipal "${fiddler}"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};

grant principal javax.security.auth.kerberos.KerberosPrincipal "${mahalo}"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};

grant principal javax.security.auth.kerberos.KerberosPrincipal "${mercury}"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};

grant principal javax.security.auth.kerberos.KerberosPrincipal "${outrigger}"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};

grant principal javax.security.auth.kerberos.KerberosPrincipal "${reggie}"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};

grant principal javax.security.auth.kerberos.KerberosPrincipal "${norm}"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";
};

grant principal javax.security.auth.kerberos.KerberosPrincipal "${phoenix}"
{
      permission org.apache.river.phoenix.SystemPermission
                 "java.rmi.activation.ActivationSystem.*";

};