Hi Renier Just some feedback on this problem. I implemented your solution using ThreadLocal and a Filter and it works 100%. Retrieval of the SecurityManager from JNDI seemed to be a dead end - I found that JBoss provides a mechanism to detect the principal, but I didn't want to lock myself into the JBoss application server.
Thanks for the help! Paul
