One must add <security-role-ref> <role-name>User</role-name> </security-role-ref> to portlet.xml View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4236893#4236893 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4236893