Yes, you can set the security in the default-object.xml file, but you will have to do that before you bring the portal up for the first time. Once the portal has been brought up, changing the security in the xml file will not work -- I think you can add new roles and their access modes, but you cannot remove existing roles, and you want to remove the Unchecked role. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4005997#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...