:-1: I don't think we should be removing the security check here.  We may need to create a new permission which will be checked here instead.

The security rules should be in security.drl as much as possible, not implicit in the code.