Thanks for you patient reply. Even ‘The factory component pattern lets a Seam component act as the instantiator for a non-component object. A factory method will be called when a context variable is referenced but has no value bound to it. We define factory methods using the @Factory annotation. The factory method binds a value to the context variable, and determines the scope of the bound value. There are two styles of factory method.’ But I think the security has nothing with @Factory,right? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4107925#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...