JaasGroupAcl acl = new JaasGroupAcl(domain);
acl.addAllowedPermission(dan, allTasks);
acl.addDeniedPermission(dan, task1);
acl.addAllowedPermission(eric, task1);
//acl.addAllowedPermission(admin, allTasks);
acl.addAllowedPermission(admin, new java.security.AllPermission());
domain.addToGroup(admin, eric);
domain.addToGroup(admin, dan);