Kabir is out on vacation. I'm taking a look at this now. Actualy, I don't need to edit the weaved code. The fix should go in the GenericAspectFactory class, the one who makes the getClassLoader call. Plus, this factory is called only the first time the joinpoint gets executed, so it will generate a smaller impact if I put the security check there. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4190861#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...