In the case where this IS an error, I see the org.jboss.security.jacc.DelegatingPolicy class (and the implies() API) come into play, while in the other (working) case, I see the ContextPolicy and the implies() API in that class come into play... So, there is definitely some difference but whether or not this is what is causing the problem, I don't know at this point :( View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4083465#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...