Yes, you should specify ReflectPermission in policy file.
Yes, you can use ?java.lang.reflect.access? property
Yes, reflection is controlled by setReflection() method of the SecutityManager
Reflection is always available to administrative users
No, reflection is always available in any J2SE JVM
No, the only way to disable reflection is to remove corresponding files from Java Runtime.
|