I built myself a simple "hello world style bean" , and the question is this, in order to have my client (small command line java program) run , I had to provide it with a security policy, I'm not entirely suprised by this as i have worked with rmi in the past, but what confuses me is that not one book/tutorial I have come accross mentions the need to set up a security manager and profile when accessing ejb's. is there another way to do it?