I am not sure as to how do I secure JNDI tree on AS6. IN Jboss AS 5.x, Naming service was deployed as an MBean and I could use the xmbean approach to secure the Naming service. In AS6, naming service is deployed as a POJO service and I do not know how to secure this service. One approach is to use 'JNDI over Http'. But I will still like to know, if I can use interceptors approach (like XMBean in AS 5.x).