There are a couple of additional threads but just to make sure this is published the following article described the out of the box security settings for AS 7.1.0.Beta1 http://community.jboss.org/docs/DOC-17367