The minimum set of security permissions that a J2EE product provider must provide for the execution of each component type.