Release ID: JBoss [Zion] 4.0.4.GA (build: CVSTag=JBoss_4_0_4_GA date=200605151000) As soon as I add <security-domain>java:/jaas/CLICK2CALL</security-domain> to jboss.xml I get java.lang.SecurityException: Insufficient method permissions, principal=admin, ejbName=CallControlBean, method=create, interface=HOME, requiredRoles=[], principalRoles=[admin] Even when there are no roles or method-permissions defined. I think this is a bug. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=3957193#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...