OK, more security questions... :) How do I set the principal propagation policy for inter-component calls in Jonas? It says in the EJB spec: "15.2.1 Invocation of other enterprise beans ... The management of caller principals passed on enterprise bean invocations (i.e. principal delegation) is set up by the Deployer and System Administrator in a container-specific way. The Bean Provider and Application Assembler should describe all the requirements for the caller's principal management of inter-enterprise bean invocations as part of the description". This clearly suggests that it should be possible to set a policy in the deployment descriptor for the propagation of the principal in inter-component calls. And looking around, it appears that some other containers (e.g. Websphere) do support this. Has this been implemented yet, and if so how does one set it? There are certain inter-component calls where the default propagation policy (i.e. of the client principal) doesn't suit me. BTW propagation of the client principal is working fine for me, I just want to be able to override it... Joe ===================================================================== Joe Gittings, Royal Botanic Gardens, Kew Hanover House, Kew, Richmond, Surrey TW9 3AB [EMAIL PROTECTED] +44 20 8332 5712 fax: +44 20 8332 5736 ---- To unsubscribe, send email to [EMAIL PROTECTED] and include in the body of the message "unsubscribe jonas-users". For general help, send email to [EMAIL PROTECTED] and include in the body of the message "help".