Applet methods called from JavaScript need to explicitly invoke the proper security context.

[CODE=java] AccessControlle r.doPrivileged( new PrivilegedActio n() {
public Object run() {
// do your stuff here
return null;
}
});[/CODE]