In the real world, some applications such as MoneyTransferAgency, used in different offices to check money transfer status and validate remittances, will only have read-only access to predefined JBoss datagrid caches. On the other hand, the ESB flow that pushed money transfer objects into the cache will at least have write access to the cache to be able to insert new transactions. Infinispan/JBoss datagrid leverages Java standards, such as JAAS and Security Manager, to protect access to caches and cache manager.
Different mechanisms can be used depending on your topologies: While using REST API to put/get entries, you can enable security on the REST connector using a custom security-domain and authentication method:
<rest-connector socket-binding="rest" cache-container="clustered" security-domain="other" auth-method="BASIC"...