How it is with security in ejb3 (or JBOSS i don't know yet)? I mean I have some Session Beans registered in JNDI on Jboss. And now, how to allow some applications to use this beans and forbid other applications to use this beans?