Working access controls on sales and bidbot EJBs