FULL PRODUCT VERSION :
java version "9-ea"
Java(TM) SE Runtime Environment (build 9-ea+157)
Java HotSpot(TM) 64-Bit Server VM (build 9-ea+157, mixed mode)

ADDITIONAL OS VERSION INFORMATION :
Microsoft Windows [Version 6.1.7601]

A DESCRIPTION OF THE PROBLEM :
While calling a webservice from a webstart application the following exception occurs:

java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "createClassLoader")
at java.base/java.security.AccessControlContext.checkPermission(AccessControlContext.java:471)
at java.base/java.security.AccessController.checkPermission(AccessController.java:894)
at java.base/java.lang.SecurityManager.checkPermission(SecurityManager.java:560)
at jdk.javaws@9-ea/com.sun.javaws.security.JavaWebStartSecurity.checkPermission(JavaWebStartSecurity.java:237)
at java.base/java.lang.SecurityManager.checkCreateClassLoader(SecurityManager.java:622)
at java.base/java.lang.ClassLoader.checkCreateClassLoader(ClassLoader.java:347)
at java.base/java.lang.ClassLoader.checkCreateClassLoader(ClassLoader.java:337)
at java.base/java.lang.ClassLoader.<init>(ClassLoader.java:411)
at java.xml.ws@9-ea/com.sun.xml.internal.ws.client.WSServiceDelegate$DelegatingLoader.<init>(WSServiceDelegate.java:942)
at java.xml.ws@9-ea/com.sun.xml.internal.ws.client.WSServiceDelegate.getDelegatingLoader(WSServiceDelegate.java:902)
at java.xml.ws@9-ea/com.sun.xml.internal.ws.client.WSServiceDelegate.createProxy(WSServiceDelegate.java:716)
at java.xml.ws@9-ea/com.sun.xml.internal.ws.client.WSServiceDelegate.createEndpointIFBaseProxy(WSServiceDelegate.java:797)
at java.xml.ws@9-ea/com.sun.xml.internal.ws.client.WSServiceDelegate.getPort(WSServiceDelegate.java:437)
at java.xml.ws@9-ea/com.sun.xml.internal.ws.client.WSServiceDelegate.getPort(WSServiceDelegate.java:405)
at java.xml.ws@9-ea/com.sun.xml.internal.ws.client.WSServiceDelegate.getPort(WSServiceDelegate.java:387)
at java.xml.ws@9-ea/javax.xml.ws.Service.getPort(Service.java:119)
...

In the JNLP-file all permissions are requested with "<all-permissions />".

"--add-modules=java.xml.ws" is added as JVM-arg.


REGRESSION. Last worked in version 8u121

ADDITIONAL REGRESSION INFORMATION:
java version "9-ea"
Java(TM) SE Runtime Environment (build 9-ea+157)
Java HotSpot(TM) 64-Bit Server VM (build 9-ea+157, mixed mode)


REPRODUCIBILITY :
This bug can be reproduced always.