Post your entities and any configuration you're using to setup idm.
I have copy-pasted entities from that source:
I have made no configuration except Maven dependency. Have I forgot something?
I have forgotten mention that anotation works well and throw exception when I try to call method and I'm not authorized to it.
I haven't done anything with the permission stuff yet, so I'm going to have to defer to Shane.
PersistentPermissionResolver hasn't been implemented in Seam 3, instead you need to provide your own permission resolver. Simply create your own implementation of PermissionResolver and implement the two methods.