so if you invoke sayHello with some other username which is not in "noone" group do you see an AccessDenied ?.
The policy seems fine.
Try EJBContext.isCallerInRole("noone"), that would work.
[Message sent by forum member 'kumarjayanti' (kumarjayanti)]
http://forums.java.net/jive/thread.jspa?messageID=336130