JAVA Fine-grained Access Control-3
Policies can be defined by a user or a system administrators. It is always possible to use a particular policy for selected applications, e.g., appletviewer -Djava.policy=~/gcf/policies/mypolicy1 applet.html java -usepolicy[:policyfile] some.local.App
Protection Domains: A domain consists of a set of objects belonging to a principal. A protection domain is based on an identity made up on demand. Permissions are granted to protection domains and not directly to classes or objects.