I'm getting a security error for a new Mbean, says I don't have "user role, admin" privileges. Security can be implemented on resources, roles, or the ejb tier. This is for xml transport over http with ssl. Not sure what files do the different security types.
Start with the JAAS Howto post in this forum.