"heiko.braun(a)jboss.com" wrote : Try adding the @Stateless annotation to the service bean. In that case @RolesAllowed should be handled by the EJB3 container. | Thank you. It didn't help. Probably, because this code is deployed as web application (.war file). Besides, in order for this class to be proper stateless session bean, I would need to annotate interface class with either @Local or @Remote, right? View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4060401#... Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...