All that the ejb3 security interceptors were doing were to extend the aspects security interceptors with bulk of the processing done in the aspects layer. Carlo wanted the ejb3 sec interceptors to implement aspects interceptor and do all the processing there. I think he is right. Moving the aspects security code into the ejb3 security code enabled me to extract common code (with ejb2). View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4143942#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...