"scott.stark(a)jboss.org" wrote : I think the issue is just duplicate code. Between aspects, security and ejb2 there seems to be a lot of duplication. | Aspects security is not being used (apart from the SecurityClientInterceptor which will be moved to ejb3 core). I am not sure about what classes the embedded version uses. I extracted the common code base between ejb2 and ejb3 into helper classes in the AS/security module, sometime ago. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4143925#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...