{
Subject subject = new Subject();
//Authenticate the caller now
if(!helper.isValid(subject, method.getName()))
throw new EJBAccessException("Invalid User");
helper.pushSubjectContext(subject);
}
else
{
//Trusted caller. No need for authentication. Straight to authorization
}