The edit button is supposed to be used to enable a user to change the preferences for a given portlet. For example, edit is used to change the location for the weather portlet so that the user an see the local weather. If you are using the edit button to allow users to change data, then you perhaps should rethink your design and instead have a link on a porlet that takes the user to another portlet that enables editing data, then you can secure the second portlet. Just my 2 cents. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4222088#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...