https://jira.jboss.org/jira/browse/JBAS-4154 is closed, now that the AS5 boots under a security manager. 302 tests got enabled now. I currently have 6-7 failing tests. Pending Items: a) JIRA issues open in EJBTHREE and Messaging for privileged blocks. b) Still the issue of VFSPermissions implying other perms. Issues: a) AOP uses vfsmemory:// pattern. Not sure about assigning perms to a codesource URL in memory. Maybe vfs real url may help. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4189278#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...