Hi, I think there is a bug in OpenEJB (3.1.3-SNAPSHOT build=20100806-01:49) when using the timer service with secured EJBs.
My callback method (the one annotated with @Timeout) is never called by the container unless I annotate it with @PermitAll... I don't think this is right, looking at the specification it says that the callback method is internal to the container and so doesn't have any security context! Thanks Christian
