WRT to this post http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4187521#... where Ales asked me to raise the JIRA issue. We need to decide what we are going to do first. This should be similar to the MBeanPermission http://java.sun.com/j2se/1.5.0/docs/api/javax/management/MBeanPermission.... where the permission has both an id and an action. I'd keep it simple for now and just have simple ids and don't worry about the action (i.e. just have '*' meaning all) The only complication is making sure aliases get resolved to their real id. Longer term, we'd probably want even more fine grained control for actions i.e. differentiate create, inject, install and invoke and probably registering an event listener (others?) View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4188118#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...