i'm a new developer with the j2ee.
after do the Duke's Bank emaple in the <Getting Started with JBoss 4.0> step by step, i can run this example well.
but, i find something unnormal in the Security.

in the <Getting Started with JBoss 4.0>, it said must add the following policy to the conf/login-config.xml file,such as
<application-policy name="dukesbank">

<login-module code="org.jboss.security.auth.spi.UsersRolesLoginModule"
flag="required" />

</application-policy>

although i'm not doing these thing, the same result of the Security is output.

i don't know why. could you give me some advisement?