"adrian(a)jboss.org" wrote : | Only reference I see is an embedded comment in the VFSPermissions thread | by Anil saying that he is no expert on AOP so he'll create a blocker issue for me | to investigate the problem. I just created an issue. Assigning priority to the JIRA issue is Ales' job. ;) There is an api (createBean) and an attempt to get the CL (from mc). So looking from the stack trace, I evaluated that the MC should be doing a priv op of the CL. The expectation from mc api for AOP is to create a bean. To make that happen, is the mc's api (createBean) job. You can either force all users of the mc api to have the getCL permission or have it internally. The mc designers have to tell us. :) View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4190161#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...