1. Integration Security Guide
  2. Appendix: Default Functional Security Implementation

A Appendix: Default Functional Security Implementation

https://docs.oracle.com/cd/E12448_01/rms/pdf/160/rms-160-og3.pdf

Default Security Reference Implementation (but not the sentence 'The source of truth for default reference implementation is jazn-data.xml').

Refer to the tables on pages 29 - 76 of the PDF listed above.