Index: topia-security/src/java/org/codelutin/topia/security/TopiaSecurityServiceImpl.java
diff -u topia-security/src/java/org/codelutin/topia/security/TopiaSecurityServiceImpl.java:1.6 topia-security/src/java/org/codelutin/topia/security/TopiaSecurityServiceImpl.java:1.7
--- topia-security/src/java/org/codelutin/topia/security/TopiaSecurityServiceImpl.java:1.6	Fri Oct 27 17:00:24 2006
+++ topia-security/src/java/org/codelutin/topia/security/TopiaSecurityServiceImpl.java	Mon Oct 30 16:00:34 2006
@@ -20,8 +20,10 @@
 
 package org.codelutin.topia.security;
 
-import static org.codelutin.topia.security.util.TopiaSecurityUtil.LOAD;
+import static org.codelutin.topia.security.util.TopiaSecurityUtil.CREATE;
+import static org.codelutin.topia.security.util.TopiaSecurityUtil.DELETE;
 import static org.codelutin.topia.security.util.TopiaSecurityUtil.TOPIA_SECURITY_PERSISTENCE_CLASSES;
+import static org.codelutin.topia.security.util.TopiaSecurityUtil.UPDATE;
 
 import java.security.AccessController;
 import java.security.Permission;
@@ -378,12 +380,14 @@
             Class[] interfaces = className.getInterfaces();
             
             if(ArrayUtils.contains(interfaces, NoSecurityLoad.class)) {
-                actions = actions - LOAD;
+                //LOAD
+                actions &= UPDATE + DELETE + CREATE;
             }
             
             /* TODO:
             if(ArrayUtils.contains(interfaces, NoEntityVetoableRead.class)) {
-                actions = actions - UPDATE;
+                // UPDATE
+                actions &= LOAD + DELETE + CREATE;
             }
             ...
             */