When Client accesses my EJB, what in Security Handler gets called?

[SG]

when a client tries to access my ejb, what gets called (security wise)?
What methods get called? How?
Is anything in JonasSecurityServiceImpl called?
Is it called when the client first sets up InitialContext?
----
To unsubscribe, send email to [EMAIL PROTECTED] and
include in the body of the message "unsubscribe jonas-users".
For general help, send email to [EMAIL PROTECTED] and
include in the body of the message "help".