The javadoc in the javax.management.MBeanServer class says:

"Additionally, for each domain d in the returned array, if the caller's permissions do not imply
MBeanPermission(null, null, new ObjectName("d:x=x"), "queryMBeans"), the domain is eliminated
from the array."

And it should say:

"Additionally, for each domain d in the returned array, if the caller's permissions do not imply
MBeanPermission(null, null, new ObjectName("d:x=x"), "getDomains"), the domain is eliminated
from the array."

The fix to carry out is just to replace "queryMBeans" by "getDomains".