I have hosted my xbap application inside a folder that can be accessed only by some roles(asp net membership).
i login in the webpage and try to access the xbap application, then a message display saying that "application files cannot be found".
btw this thing works with a silverlight appliation.