How to solve Error - javax.ejb.AccessLocalException: Client not authorized for this invocation

To solve this problem,  clear the generated policy files and redeploy the application.

For example, for glassfish, delete the directory domains/domainx/generated/policy// and completely redeployed (not just restarted) the app.

Actually there are many factors can cause this. This is just one of the quickest solution that once works for me. If it still doesn't work for you, you need to try other methods, such as set the logging level of the SECURITY Logger to FINE so that the server Policy subsystem will log a detailed message describing the nature of the failed permission check.