Did you read Q10 in the SecurityFAQ that I pointed to you earlier? It already has the source code example, the details and a link to the forum thread discussing a similar issue.
Reply to this message by going to Community
Start a new discussion in EJB 3.0 at Community