gistfile1.xml

<server xmlns="urn:jboss:domain:2.1">
   <management>
      <security-realms>
         <security-realm name="ApplicationRealm">
            <authentication>
               <local default-user="$local" allowed-users="*" skip-group-loading="true"/>
               <properties path="application-users.properties" relative-to="jboss.server.config.dir"/>
            </authentication>
            <authorization>
               <properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
            </authorization>
         </security-realm>
      </security-realms>
   </management>
   
   <profile>
   
      <subsystem xmlns="urn:infinispan:server:core:7.0" default-cache-container="local">
         <cache-container name="local" default-cache="default">
            <security>
               <authorization>
                  <identity-role-mapper/>
                  <role name="admin" permissions="ALL"/>
                  <role name="reader" permissions="READ"/>
                  <role name="writer" permissions="WRITE"/>
                  <role name="supervisor" permissions="ALL_READ ALL_WRITE"/>
               </authorization>
            </security>
            <local-cache name="default" start="EAGER">
               <locking acquire-timeout="30000" concurrency-level="1000" striping="false"/>
            </local-cache>
            <local-cache name="secured">
               <security>
                  <authorization roles="admin reader writer supervisor"/>
               </security>
            </local-cache>
         </cache-container>
      </subsystem>
      
      <subsystem xmlns="urn:infinispan:server:endpoint:7.0">
         <hotrod-connector socket-binding="hotrod" cache-container="local">
            <topology-state-transfer lock-timeout="1000" replication-timeout="5000"/>
            <authentication security-realm="ApplicationRealm">
               <sasl server-name="localhost" mechanisms="PLAIN"/>
            </authentication>
         </hotrod-connector>
      </subsystem>
      
   </profile>
</server>