For example, I have two classes:
class Foo
{
protected void say() {...};
}
class Bar extends Foo {.....}
Can I somehow allow the "say" method to be called only from the Bar and other derived classes, but not from the other classes in Foo's package.
No, protected mean, protected member can be accessed in the same package and all subclasses in any package. If you want to restrict the access in package level, move that class into a separate package.