For this kind of usecase can you not do the following :
Option 1 : You can merge the two EJB's in question and do direct java method invocations.
Option 2 : Have a Facade for the protected Web Access, but have the 2 EJB's invoke each other's methods unprotected.
these are just my thoughts.
[Message sent by forum member 'kumarjayanti' (kumarjayanti)]
http://forums.java.net/jive/thread.jspa?messageID=332838