posted 20 years ago
You can use most of the Reflection API, it's only part of it which is disallowed. You cannot enable the security permission java.lang.reflect.ReflectPermission. If the named permission target (suppressAccessChecks) is enabled, a class is allowed to use reflection to inspect, access, and modify protected and private members and methods in other classes. A bean could therefore yield sensitive information, which is a security risk.
SCJP 1.4, SCWCD 1.3, SCBCD 1.3