There's no way to enforce security on an in-vm connection in AS7 ---------------------------------------------------------------- Key: WFLY-958 URL: https://issues.jboss.org/browse/WFLY-958 Project: WildFly Issue Type: Bug Security Level: Public(Everyone can see) Components: JMS Reporter: Justin Bertram Assignee: Jeff Mesnil When AS7 starts org.jboss.as.messaging.jms.JMSService sets up a default security override for in-vm connections. There is no way to disable this override and there should be.