"richard.opalka(a)jboss.com" wrote : We generate web.xml/jboss-web.xml for JBoss AS 5 Beta 4 and we generate JBossWebMetaData for JBoss AS 5 trunk. JACC permissions are created based on the JBossWebMetaData. So I am suspecting that it seems to be some type of a timing issue that the WS processing (dynamic generation/metadata population) is happening beyond the Security Deployer that works on the metadata. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4172989#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...