...
The permission ReflectPermission
with action suppressAccessChecks
should also not be granted so that the security manager blocks attempts to access private fields of other classes. (See SEC32ENV32-J. Do not grant ReflectPermission with target suppressAccessChecks)
...