can't you restrict this on your application (web? )rather than changing the permission in the process? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4245847#4245847 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4245847