Is there some easy way I tell if my "security-manager-enabled=true" is working? I am running 6.1 CE GA2. I see nothing on startup about PACL.

I have deployed my portlet, which I'm sure should fail but I see no warnings or errors on deployment or when using the portlet.

What is some simple line I could add to my portlet that would definitely cause a PACL error?

I have looked in the portal console at Portal Properties and I can see that it is set to true:
security-manager-enabled true

I also tried downloading several portlets from the market and none so far have had any permissions in the liferay-plugin-package.properties file.

Update:
Continuing on impossible hunt I tried adding in some code to download from the url google.com. This should trigger the socket security (http://www.liferay.com/documentation/liferay-portal/6.1/development/-/ai/lp-6-1-dgen11-socket-security-0) but it does not.

Got it. You have to put the security-manager-enabled=true in both your portal-ext.properties and in the liferay-package-plugin.properties of the portlet.

Just to clarify, security-manager-enabled=true is not needed in your portal-ext.properties. In fact, it doesn't do anything as there's no such portal property.

Thanks! I have removed it from my portal-ext.