On Thursday 28 June 2001 09:26, seb bacon wrote: > SecurityManagement.getSecurityManager() tries to get a SecurityManager > for the current thread, fails, and returns a default SecurityManager > with a context which sets the user to be Anonymous. It sounds like you might be using checkPermission() before authentication has occurred. What are you working on? Shane