It seems you don't need access to the flight deck to pull off a hijack. The NTSB data from the FDR of American Airline's 77 on Sep 11 indicates that the flight deck door remained closed for the duration of the flight from Dulles to the Pentagon.
AAL77 FDR Decoder