Arquillian SecurityActions fail under actual security manager ------------------------------------------------------------- Key: ARQ-1859 URL: https://issues.jboss.org/browse/ARQ-1859 Project: Arquillian Issue Type: Bug Components: Base Implementation Affects Versions: 1.1.2.Final Reporter: David Lloyd Priority: Critical The {{org.jboss.arquillian.core.impl.loadable.SecurityActions#newInstance(java.lang.Class<T>, java.lang.Class<?>[], java.lang.Object[])}} method takes extra care to reflectively acquire an object constructor in a privileged block. However, it then calls setAccessible(true) outside of a privileged block, rendering previous efforts useless and causing execution failures. The fix is to move that statement to within the privileged block as well.