During the latest days I've been fighting with my hosting provider because I tried to deploy Xwiki (xwiki.org) in my hosted web site. The core issue was XWiki requires that the web container security policy includes:
permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
Actually, it's Struts and Velocity that requires that, not XWiki code itself. See for more info
http://...
