"anil.saldhana(a)jboss.com" wrote : Good point. In my opinion there should just be a flag on the invocation whether the call was intra-vm or intervm. Why not put a VMID in the Invocation at the container/core level, along with a method "boolean isLocalInvocation()" in EJBContainer, and then the security interceptor can call upon that? Then the interceptors would depend on the containers, not each other. S, ALR View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4139466#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...