Anil, if you're concerned about location of code and separation of concerns, please start another thread and I'm sure someone with more architectural influence will weigh in. Adrian, when did I infer that EJB3 will define AS security? Or that I'd be moving the deployers? All I want to know is what is expected of the Plugin looking forward so that I can account for it now. S, ALR View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4135018#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...