Is this after configuring the <security-role-mapping> element with the sun-ejb-jar.xml? This should map the role to the propagated principal in the EJB and the interceptor and ensure that the caller's role is present in the context.
--Nithya
[Message sent by forum member 'nitkal' (nitkal)]
http://forums.java.net/jive/thread.jspa?messageID=316993