jdk/test/javax/security/auth/Subject/doAs/policy

grant {
    permission javax.security.auth.AuthPermission "doAs";
    permission javax.security.auth.AuthPermission "doAsPrivileged";
    permission java.lang.RuntimePermission "createSecurityManager";
    permission java.lang.RuntimePermission "setSecurityManager";
};

grant principal javax.security.auth.x500.X500Principal "CN=joe" {
    permission java.util.PropertyPermission "foobar", "read";
};