Edit /Library/Java/JavaVirtualMachines/*your java version*/Contents/Home/jre/lib/security/java.policy
add before the closing bracket:
permission java.io.FilePermission "/System/Volumes/Data/usr/local/Cellar/elasticsearch/-", "read";
permission java.io.FilePermission "/System/Volumes/Data/usr/local/var/elasticsearch/-", "read";
permission java.io.FilePermission "/System/Volumes/Data/usr/local/var/elasticsearch/-", "write";
permission java.io.FilePermission "/System/Volumes/Data/usr/local/var/elasticsearch/-", "delete";
permission java.io.FilePermission "/System/Volumes/Data/usr/local/var/log/elasticsearch/-", "write";
permission java.io.FilePermission "/System/Volumes/Data/usr/local/var/log/elasticsearch/-", "read";