catch the EJBAccessException in the servlets and let the user know he's not authorized