FULL PRODUCT VERSION :
java version "10-ea" 2018-03-20
Java(TM) SE Runtime Environment 18.3 (build 10-ea+41)
Java HotSpot(TM) 64-Bit Server VM 18.3 (build 10-ea+41, mixed mode)

ADDITIONAL OS VERSION INFORMATION :
Microsoft Windows [Version 10.0.16299.192]

A DESCRIPTION OF THE PROBLEM :
The build in class java.base/java.util.zip.ZipFile$CleanableResource try to access to getDeclaredMethod() but do this not as priveleged action.

java.security.AccessControlException: access denied ("java.lang.RuntimePermission" "accessDeclaredMembers")
at java.base/java.security.AccessControlContext.checkPermission(Unknown Source)
at java.base/java.security.AccessController.checkPermission(Unknown Source)
at java.base/java.lang.SecurityManager.checkPermission(Unknown Source)
at jdk.javaws@10-ea/com.sun.javaws.security.JavaWebStartSecurity.checkPermission(Unknown Source)
at java.base/java.lang.Class.checkMemberAccess(Unknown Source)
at java.base/java.lang.Class.getDeclaredMethod(Unknown Source)
at java.base/java.util.zip.ZipFile$CleanableResource.get(Unknown Source)
at java.base/java.util.zip.ZipFile.<init>(Unknown Source)
at java.base/java.util.zip.ZipFile.<init>(Unknown Source)
at java.base/java.util.jar.JarFile.<init>(Unknown Source)
at jdk.deploy@10-ea/com.sun.deploy.cache.CachedJarFile.<init>(Unknown Source)
at jdk.deploy@10-ea/com.sun.deploy.cache.CachedJarFile.clone(Unknown Source)
at jdk.deploy@10-ea/com.sun.deploy.net.protocol.jar.DeployURLConnection$1.run(Unknown Source)
at jdk.deploy@10-ea/com.sun.deploy.net.protocol.jar.DeployURLConnection$1.run(Unknown Source)
at java.base/java.security.AccessController.doPrivileged(Native Method)
at jdk.deploy@10-ea/com.sun.deploy.net.protocol.jar.DeployURLConnection.getJarFile(Unknown Source)
....................................
        ...........................................................


REGRESSION. Last worked in version 9.0.4



EXPECTED VERSUS ACTUAL BEHAVIOR :
EXPECTED -
No internal security exceptions

REPRODUCIBILITY :
This bug can be reproduced always.