anchor.diff:  
   | `gfsh` Command                         | Assigned `ResourcePermission`
   |----------------------------------------|----------------------------------|
  -| alter disk-store                       | DATA:MANAGE                      |
  +| alter disk-store                       | CLUSTER:MANAGE:DISK              |
   | alter region                           | DATA:MANAGE:RegionName           |
   | alter runtime                          | CLUSTER:MANAGE                   |
  -| backup disk-store                      | DATA:READ                        |
  +| backup disk-store                      | DATA:READ and CLUSTER:WRITE:DISK |
   | change loglevel                        | CLUSTER:WRITE                    |
  -| clear defined indexes                  | DATA:MANAGE                      |
  -| close durable-client                   | DATA:MANAGE                      |
  -| close durable-cq                       | DATA:MANAGE                      |
  -| compact disk-store                     | DATA:MANAGE                      |
  -| compact offline-disk-store             | DATA:MANAGE                      |
  +| clear defined indexes                  | CLUSTER:MANAGE:QUERY             |
  +| close durable-client                   | CLUSTER:MANAGE:QUERY             |
  +| close durable-cq                       | CLUSTER:MANAGE:QUERY             |
  +| compact disk-store                     | CLUSTER:MANAGE:DISK              |
   | configure pdx                          | CLUSTER:MANAGE                   |
  -| create async-event-queue               | DATA:MANAGE                      |
  -| create defined indexes                 | DATA:MANAGE                      |
  -| create disk-store                      | DATA:MANAGE                      |
  -| create gateway-receiver                | DATA:MANAGE                      |
  -| create gateway-sender                  | DATA:MANAGE                      |
  -| create index                           | DATA:MANAGE:RegionName           |
  -| create lucene index                    | DATA:MANAGE:RegionName           |
  -| create region                          | DATA:MANAGE                      |
  -| define index                           | DATA:MANAGE:RegionName           |
  -| deploy                                 | DATA:MANAGE, DATA:WRITE, CLUSTER:MANAGE, and CLUSTER:WRITE |
  +| create async-event-queue               | CLUSTER:MANAGE:JAR, plus CLUSTER:WRITE:DISK if the associated region is persistent |
  +| create defined indexes                 | CLUSTER:MANAGE:QUERY            |
  +| create disk-store                      | CLUSTER:MANAGE:DISK             |
  +| create gateway-receiver                | CLUSTER:MANAGE:GATEWAY          |
  +| create gateway-sender                  | CLUSTER:MANAGE:GATEWAY          |
  +| create index                           | CLUSTER:MANAGE:QUERY            |
  +| create lucene index                    | CLUSTER:MANAGE:LUCENE            |
  +| create region                          | DATA:MANAGE, plus CLUSTER:WRITE:DISK if the associated region is persistent |
  +| define index                           | CLUSTER:MANAGE:QUERY             |
  +| deploy                                 | CLUSTER:MANAGE:JAR               |
   | describe client                        | CLUSTER:READ                     |
   | describe config                        | CLUSTER:READ                     |
   | describe disk-store                    | CLUSTER:READ                     |
  -| describe lucene index                  | CLUSTER:READ                     |
  +| describe lucene index                  | CLUSTER:READ:LUCENE              |
   | describe member                        | CLUSTER:READ                     |
   | describe offline-disk-store            | CLUSTER:READ                     |
   | describe region                        | CLUSTER:READ                     |
  -| destroy disk-store                     | DATA:MANAGE                      |
  -| destroy function                       | DATA:MANAGE                      |
  -| destroy index                          | DATA:MANAGE or DATA:MANAGE:RegionName |
  -| destroy lucene index                   | DATA:MANAGE:RegionName           |
  +| destroy disk-store                     | CLUSTER:MANAGE:DISK              |
  +| destroy function                       | CLUSTER:MANAGE:JAR               |
  +| destroy index                          | CLUSTER:MANAGE:QUERY             |
  +| destroy lucene index                   | CLUSTER:MANAGE:LUCENE            |
   | destroy region                         | DATA:MANAGE                      |
  -| disconnect                             | DATA:MANAGE                      |
  -| echo                                   | DATA:MANAGE                      |
  -| encrypt password                       | DATA:MANAGE                      |
  -| execute function                       | DATA:WRITE                       |
  +| execute function                       | determined by the function API   |
   | export cluster-configuration           | CLUSTER:READ                     |
   | export config                          | CLUSTER:READ                     |
   | export data                            | CLUSTER:READ                     |
  
positive.code: | DistributedSystemMXBean.changerAlertLevel      | CLUSTER:WRITE             |
  | ManagerMXBean.setPulseURL                      | CLUSTER:WRITE             |
  | ManagerMXBean.setStatusMessage                 | CLUSTER:WRITE             |
  | CacheServerMXBean.closeAllContinuousQuery      | DATA:MANAGE               |
  | CacheServerMXBean.closeContinuousQuery         | DATA:MANAGE               |
  | CacheServerMXBean.executeContinuousQuery       | DATA:READ                 |
  | DiskStoreMXBean.flush                          | DATA:MANAGE               |
  | DiskStoreMXBean.forceCompaction                | DATA:MANAGE               |
  | DiskStoreMXBean.forceRoll                      | DATA:MANAGE               |
  | DiskStoreMXBean.setDiskUsageCriticalPercentage | DATA:MANAGE               |
  | DiskStoreMXBean.setDiskUsageWarningPercentage  | DATA:MANAGE               |
  | DistributedSystemMXBean.revokeMissingDiskStores| DATA:MANAGE               |
  | DistributedSystemMXBean.setQueryCollectionsDepth| DATA:MANAGE              |
  | DistributedSystemMXBean.setQueryResultSetLimit | DATA:MANAGE               |
  | DistributedSystemMXBean.backupAllMembers       | DATA:READ                 |
  | DistributedSystemMXBean.queryData              | DATA:READ                 |
  | DistributedSystemMXBean.queryDataForCompressedResult | DATA:READ           |
  | GatewayReceiverMXBean.pause                    | DATA:MANAGE               |
  | GatewayReceiverMXBean.rebalance                | DATA:MANAGE               |
  | GatewayReceiverMXBean.resume                   | DATA:MANAGE               |
  | GatewayReceiverMXBean.start                    | DATA:MANAGE               |
  | GatewayReceiverMXBean.stop                     | DATA:MANAGE               |
  | GatewaySenderMXBean.pause                      | DATA:MANAGE               |
  | GatewaySenderMXBean.rebalance                  | DATA:MANAGE               |
  | GatewaySenderMXBean.resume                     | DATA:MANAGE               |
  | GatewaySenderMXBean.start                      | DATA:MANAGE               |
  | GatewaySenderMXBean.stop                       | DATA:MANAGE               |
  | LockServiceMXBean.becomeLockGrantor            | CLUSTER:MANAGE            |
  | MemberMXBean.compactAllDiskStores              | DATA:MANAGE               |
  
  ## Implement Authorization
  
  
negative.code: | Region.registerInterest(regex)     | DATA:READ:RegionName                |
  | Region.unregisterInterest(key)     | DATA:READ:RegionName:Key            |
  | Region.unregisterInterest(regex)   | DATA:READ:RegionName                |
  | execute function                   | determined by the function API      |
  | clear region                       | DATA:WRITE:RegionName               |
  | Region.putAll                      | DATA:WRITE:RegionName               |
  | Region.clear                       | DATA:WRITE:RegionName               |
  | Region.removeAll                   | DATA:WRITE:RegionName               |
  | Region.destroy(key)                | DATA:WRITE:RegionName:Key           |
  | Region.invalidate(key)             | DATA:WRITE:RegionName:Key           |
  | Region.destroy(key)                | DATA:WRITE:RegionName:Key           |
  | Region.put(key)                    | DATA:WRITE:RegionName:Key           |
  | Region.replace                     | DATA:WRITE:RegionName:Key           |
  
  