@AroundInvoke
    public Object propagateShiroSecurity(final InvocationContext ctx) throws Exception {
        checkPermissions(ctx);
        return ctx.proceed();
    }
Enforce Shiro security on EJBs and CDI Beans
support/cdi/src/main/java/org/apache/shiro/cdi/ShiroSecurityInterceptor.java