kgoedert, You haven't yet posted any code or configurations, so i don't exactly know what might be wrong :-) Sometime back, there was a similar thread where we had a discussion about securing EJBs and allowing only specific roles to have access to the methods. Read through this thread http://www.jboss.com/index.html?module=bb&op=viewtopic&t=138382. The example is based on EJB2.x, but one reply in that thread has an EJB3 example. If that does not help then post back with more details. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4164395#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...