Browsed thru the source codes. The interceptor as described in URL: http://www.jboss.org/wiki/Wiki.jsp?page=XMBeansforSecurity
only intercept calls to object org.jboss.naming.NamingService But according to the class diagram in URL http://docs.jboss.org/jbossas/admindevel326/html/ch3.chapter.html#ch3.jbossns.fig JNDI client only interact with object org.jnp.server.NamingServer thru interface org.jnp.interfaces.Name, the interceptor will not be called, hence the access control still will not in place. Am I right? View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=3857128#3857128 Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=3857128 ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________ JBoss-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jboss-user