For the real answer, I'd suggest asking on the Hibernate forums why they don't have any doPrivileged blocks and if this means they cannot run in a secure environment. Then duck.
I'm not brave enough *grin*.
If external libraries are used in a secure environment, then all the calls that a privilged user can make must be wrapped in a doPrivileged block.
Yup. Figured as much. /Janne
