Hi, i wonder if it is on purpose, that my controller's initalizeAction method gets called, before the security context is initialized. This way, i cant do anything that is Userrelated in this methods, which does not seem right to me. Can anybody enlighten me about this? -- Cheers, Christian