Defining a class in a package

[Treimin Clark]

From Maikali Zaikin's notes:

Maikalai Zaikin wrote:The enterprise bean must not attempt to define a class in a package. This function is reserved for the EJB container. Allowing the enterprise bean to perform this function would create a security hole

What is this?
Couldn't we define a package statement for a bean?

package com.mybeans;

Is this illegal?

[Christophe Verré]

This is taken straight from the spec : 21.1.2 Programming Restrictions.
I think this point has something to do with java.lang.ClassLoader's defineClass and definePackage methods.

[Raf Szczypiorski]

Hi. What you did is perfectly valid. I think the rule you quote has sth to do with dynamic class loading and the ClassLoader.defineClass() method.

[Treimin Clark]

Thanks to Christophe,

Raf Szczypiorski wrote:Hi. What you did is perfectly valid. I think the rule you quote has sth to do with dynamic class loading and the ClassLoader.defineClass() method.

What is "dynamic class loading"? Did you mean java reflection?