a method and system for providing security protection to common object request broker architecture objects located on a server . an ejb shadow object is created for the corba object . the ejb shadow object invokes an ejb security mechanism on behalf of the corba object , thus protecting the corba object from unauthorized object requesters . in a preferred embodiment , requesters are categorized and identified by their roles in the enterprise . only those requesters having a proper role are authorized to access the requested object .