There ought to be a way for AOP (and anyone else using vfsmemory) to assign a symbolic (repeatable) name to the codesource. Obviously this would have to be established in a secure manner though (so that you couldn't just take someone else's name to get their permissions). This way, users could reasonably assign permissions to their code, but also the code that their code generates. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4189462#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...