I'm going to start a COM object that basically checks user password only. If the password is okay, then i return the an interface pointer of an object that the application request for, but by the way, how can i disable that all objects must use the security object to obtain a pointer to the target objects ???