Why does JBoss log a "javax.management.JMRuntimeException: JBAS011360: Unauthorized access" error when invoking MBeanServer operations in JBoss EAP 7 / 6 ?

Issue

• Why does JBoss EAP log a javax.management.JMRuntimeException: JBAS011360: Unauthorized access error when invoking MBeanServer operations?

• We are getting javax.management.JMRuntimeException: JBAS011360: Unauthorized access when invoking MBeanServer operations. The odd thing is that this only happens if the java security manager is enabled. I can reproduce this by calling MBeanServer.isRegistered() in a servlet's doGet() method. If the security manager is disabled, the call works.

• It looks like the user's permissions (userPermissions in org.jboss.as.controller.access.permission.ManagementPermissionAuthorizer.authorize()) are different depending on whether or not the security manager is enabled or disabled: