Definition access list with username as principal cause Permission denied exception. The actual reason is that security context returns user name enclosed in brackets brackets "<>". Thus access manager does not recognize user name and blocks access.