tufla- The security policy of the CMS Admin tool should not be set using the jboss-service.xml file. That policy specified in this file is only used to generate the security policy the first time the portal is created and serves as *boot* policy. The security policy should be set via the CMS Admin tool using the "Secure Node" functionality provided in the "Actions" menu bar Thanks View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4067447#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...