I am developing a secured Banking service in RMI with a GUI both for Server and Client.
The Server must be able to log every operations (new User, deleted User, With
You are misunderstanding how Remote interfaces work. the client does not have the Bank, it only has a reference to a remote instance of a Bank. all the method calls made by the client on the Bank interface are actually turned into remote calls against the remote instance of the Bank (running in the server).
presumably, the security checking is done inside the Bank methods on every method call.