Hi,
I just found a quiet simple work around for this problem.
I simply added the security domain for the jmx-console to the data source:
<local-tx-datasource>
<jndi-name>...</jndi-name>
...
<security-domain>jmx-console</security-domain>
</local-tx-datasource>