To people writing production software:
When, if ever, have you used custom permissions, as described here:
http://java.sun.com/developer/JDCTechTips/2004/tt0518.html#2
Is this only effective at providing resource protection for users of
an application? Does it provide any protection against malicious code?
-----
Your response will help in developing a java secure coding standard.
