j.m.u.FactoryFinder.factoryFromServiceLoader needs PrivilegedAction j…

…akartaee#621

Signed-off-by: Jorge Bescos Gascon <jorge.bescos.gascon@oracle.com>

api/src/main/java/jakarta/mail/util/FactoryFinder.java

@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2021 Oracle and/or its affiliates. All rights reserved.
+ * Copyright (c) 2021, 2022 Oracle and/or its affiliates. All rights reserved.
  *
  * This program and the accompanying materials are made available under the
  * terms of the Eclipse Public License v. 2.0, which is available at
@@ -126,12 +126,17 @@ private static <T> T lookupUsingOSGiServiceLoader(String factoryId) {
     private static <T> T factoryFromServiceLoader(Class<T> factory) {
         try {
             ServiceLoader<T> sl = ServiceLoader.load(factory);
-            Iterator<T> iter = sl.iterator();
-            if (iter.hasNext()) {
-                return iter.next();
-            } else {
-                return null;
-            }
+            return AccessController.doPrivileged(new PrivilegedAction<T>() {
+                @Override
+                public T run() {
+                    Iterator<T> iter = sl.iterator();
+                    if (iter.hasNext()) {
+                        return iter.next();
+                    } else {
+                        return null;
+                    }
+                }
+            });
         } catch (Throwable t) {
             // For example, ServiceConfigurationError can be thrown if the factory class is not declared with 'uses' in module-info
             throw new IllegalStateException("Cannot load " + factory + " as ServiceLoader", t);