@Before
  public void setup() throws Exception {
    // We want the cluster VMs to be super-users for ease of testing / remote invocation.
    Properties clusterMemberProperties = getVMPropertiesWithPermission("cluster,data");

    if (shouldSetObjectFilterProperty(clientVmConfiguration)) {
      clusterMemberProperties.setProperty(ConfigurationProperties.SERIALIZABLE_OBJECT_FILTER,
          "org.apache.geode.security.templates.UsernamePrincipal");
    }

    locator = csRule.startLocatorVM(0, clusterMemberProperties);
    server = csRule.startServerVM(1, clusterMemberProperties, locator.getPort());
    server.invoke(() -> {
      Cache cache = ClusterStartupRule.getCache();
      RegionFactory<String, String> rf = cache.createRegionFactory(RegionShortcut.PARTITION);
      Region<String, String> region = rf.create(regionName);
      region.put(initKey, initValue);
    });
  }
Tests for authorization from client to server for data puts and gets. For similar test in the
case of failover, see {@link ClientDataAuthorizationUsingLegacySecurityWithFailoverDUnitTest}.

@since GemFire 5.5
geode-core/src/upgradeTest/java/org/apache/geode/security/ClientDataAuthorizationUsingLegacySecurityDUnitTest.java