@Override
  public AttributeList getAttributes(ObjectName name, String[] attributes)
      throws InstanceNotFoundException, ReflectionException {
    AttributeList results;
    checkAuthorization(name, attributes);
    try {
      results = mbs.getAttributes(name, attributes);
    } catch (Exception e) {
      throw new GemFireSecurityException(
          "error getting values of attributes :" + Arrays.toString(attributes) + " from " + name,
          e);
    }
    return results;
  }
This class intercepts all MBean requests for GemFire MBeans and passed it to
ManagementInterceptor for authorization

@since Geode 1.0
geode-core/src/main/java/org/apache/geode/management/internal/security/MBeanServerWrapper.java