Index: bin/netsvc.py
===================================================================
--- bin/netsvc.py       (revision 2092)
+++ bin/netsvc.py       (working copy)
@@ -194,6 +194,8 @@
                import traceback
                try:
                        n=self.path.split("/")[-1]
+                       if n not in _group['web-services']:
+                               raise Exception('AccessDenied')
                        s=LocalService(n)
                        m=getattr(s,method)
                        s._service._response=None
@@ -327,6 +329,8 @@
                                self.threads.remove(self)
                                return False
                        try:
+                               if msg[0] not in _group['web-services']:
+                                       raise Exception('AccessDenied')
                                s=LocalService(msg[0])
                                m=getattr(s,msg[1])
                                s._service._response=None
Index: bin/osv/osv.py
===================================================================
--- bin/osv/osv.py      (revision 2092)
+++ bin/osv/osv.py      (working copy)
@@ -56,7 +56,6 @@
                self.created = []
                self._sql_error = {}
                netsvc.Service.__init__(self, 'object_proxy', audience='')
-               self.joinGroup('web-services')
                self.exportMethod(self.exportedMethods)
                self.exportMethod(self.obj_list)
                self.exportMethod(self.exec_workflow