You can read about how JBoss Portal handles security in the documentation: http://docs.jboss.com/jbportal/v2.6.3/referenceGuide/html/security.html Security can be assigned in JBoss Portal specific configuration files (*-object.xml). As long as the file name used to configure security in Liferay does not conflict with the name used in the JBoss Portal, you can package both files in the portlet war file. When you deploy to Liferay, it should pick up its config files and ignore JBoss Portal's config file, and vice versa. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4119125#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...