We would have to do a lot more work to identify methods that are part of an interface as its not readily available from the Class or Method objects. I did test that if you obtain the Method object from the interface that this can be used to reflect on the instance of the non-public class without having to call setAccessible. A proper fix would probably have to consider whether methods belong to an interface or else when running under a security manager one would have to grant ReflectPermission("suppressAccessChecks") to contexts that should not need it. View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4210535#... Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&a...