we have two web applications (one is more a web service than a web app, but it's packaged as a war and is accessed via http post), i'll call them webService.war and nonWebService.war. the nonWebService.war uses a custom security module to provide authentication. we'd like the webService.war to trust traffice from the nonWebService.war, but not anything else. these are both deployed to the same physical instance of jboss.

any helps would be most appreciated!!
thanks!
mark