[ https://issues.jboss.org/browse/ISPN-4451?page=com.atlassian.jira.plugin.... ] Tristan Tarrant commented on ISPN-4451: --------------------------------------- Starting a cache (i.e. invoking getCache() on an unstarted cache) is only allowed if the Subject has LIFECYCLE permission. Once a cache has been started, subsequent getCache() invocations don't check permissions. However, invoking any operation on the returned cache requires a permission, so the SecureCache is useless without a valid permission. We could introduce an ACCESS permission which forbids a getCache() op on a started cache, but I don't see this as critical. -- This message was sent by Atlassian JIRA (v6.2.6#6264)