jdk/test/java/nio/file/Files/walkFileTree/grantTopOnly.policy

// policy file that grants read access to source directory
grant {
    permission java.io.FilePermission "${test.src}", "read";
};