Does anyone have a good example of a Java policy file for JBOSS that does not consist of a whole list of AllPermissions settings?

I am not able to get it to work without the AllPermissions setting. But that does not make sense.

Regards,

René