I need some permissions to be granted to a self-signed applet. Is this possible without the user editing his .java.policy file? I was thinking something in the applet tag, since in JavaWebStart application permissions can be granted simply by adding a security tag to the jnlp file.

Also here [Java Applet Permissions](https://stackoverflow.com/questions/620153/java-applet-permissions) it states
"applet methods called from JavaScript have no permissions, even if you explicitly grant them in a policy file"
is this by design... I kind of don't see the rational for it!?