I just tested this by putting a @Restrict in the seamBay example in AuctionService.listCategories() then calling the web service via the test page in the seam-bay app. @WebMethod @Restrict("#{s:hasRole('admin')}") | public Category[] listCategories() This successfully returned the following SOAP fault when I tried to invoke the method without logging in: <env:Envelope xmlns:env='http://schemas.xmlsoap.org/soap/envelope/'> | <env:Header></env:Header> | <env:Body> | <env:Fault xmlns:env='http://schemas.xmlsoap.org/soap/envelope/'> | <faultcode>env:Server</faultcode> | <faultstring>org.jboss.seam.security.NotLoggedInException</faultstring> | </env:Fault> | </env:Body> | </env:Envelope> I'm guessing that you probably have a configuration problem somewhere. I would start by comparing your project to seamBay to see if there's any obvious configuration differences. View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4124408#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...