Access System Resources using Java Applet via Java Script

Question

Hello
I can access my Applet public methods (and this methods access system resources) via Java Script if I do the following: System.setSecurityManager(null);However, I'm making this post because I don't like this solution.
Supposedly, setting the SM to null is like making the Applet (which is signed and was accepted by the user via a prompt from the browser) behave like a normal Java program that has no restrictions. (http://java.sun.com/docs/books/tutorial/essential/environment/security.html, second paragraph)
However, this feels like a workaround of something that is supposed to be there (the SM).
Also, if I make the methods invocation from inside the applet (using swing buttons and textboxes for example) I can use the standard SM without no problems.
From my readings, the problem regarding Java Script invocation, comes from the fact that the Java Script is not a secure (not signed) source (because you can invoke public methods the way you wish from it i guess) on the contrary to the applet methods invoked by the buttons.
Possible solutions I found in the web range from using the public static Object doPrivileged(PrivilegedAction action) method or imaginative things like creating new threads on the public method that call the private methods that access the system resources (supposedly because the new thread runs under the safe environment of the applet)
I almost got a glimpse of hope with this post http://forums.sun.com/thread.jspa?threadID=5325271&tstart=0
However, none of these solutions worked, the only results were with the setResourceManager(null)So, any one can contribute with a solution for this? Should I keep trying to find a solution other then the one I already have?
Regards
Cad

Answer 1

1. yes
2. yes
Note for 2. the converter will run the applet with SUN jre for sure if the user has IE.
IE will use the ActiveX technology to run the applet (as with Macromedia Flash).
For Netscape I am not sure, but I would think Netsape will use the plug in provided by
SUN.
Note for SUN jre 1.3. If this applet is to be used within a company that uses a proxy with
ntlm authentication the 1.3 applet cannot connect (to the Internet) through this proxy since
ntlm athentication is supported since j2re1.4.2_03. There is one version before that but
that one will pop up a window asking for the user's domain account and password wich
is both lame and crappy.
As for the IE settings, IE has a default setting that askes users the "do you trust"
queston for AciveX controls within the Internet securety zone (tools -> internet options
-> security).
Sincy anybody can make ActiveX controls (allso sign them) a user that has a problem
to find the "no" button will sooner or later install a malicuous ActiveX control (spy ware
or a virus).
If this user's desktop is within your company's network it will cause serious harm.
This is why most company's disable this by changing the default internet expolorer
settings. Since I assume you are writhing this applet to be used by a company I allso
assumed that company has someone to maintain the desktops. In that case I
assume that person would want to control the security within the SUN jre instead of
letting the user deside what to trust and what not.