"anil.saldhana(a)jboss.com" wrote : | Ok. There goes my night of sleep. I had this nagging doubt. If it would be aop, then the messaging release could go ahead. They use aop everywhere. AOP should be generating privileged blocks for the calling code since it does live in the messaging codebase. The block would be in the org.jboss.jms.client.delegate.ClientSessionDelegate.createMessage generated code. I assume since this is statically generated it does have the jboss-messaging.jar codebase so that that is what would be assigned the getClassLoader permission. If that is how it works that is the correct way. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4190716#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...