Another thing is that the exceptions are thrown from a different thread than the calling thread. To check an unauthorized consume, for example, I have to send the message and check if the message is not received. But not being able to receive a message can happen with many reasons, it's not security specific. And having the exception thrown on other thread make it harder to debug, as you cannot see from the stack trace any of your source code line numbers. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4227268#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...