Your analysis is correct, the problem appears to be that an EJBSecuritymanager is not being
created and registered for the embedded EJB's. I recall working throiugh several tests for embedded ejbs' so there appears to be something different about your app, that causes the embedded ejbs to not be seen. our team is working on it.