The changes to the security deployer are ready. Now the components (web,ejb) do not do anything with jacc policy but the policy configuration lifecycle is surrounding the component lifecycles. I will be checking in the changes on Wednesday along with the security context changes. The top level jacc policy service bean is dependent on policy configuration facade service beans for the components and commits the parent when its subcomponents have all started. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4040428#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...