The default SecurityManager checks whether the caller of a particular method has sufficient permissions to proceed with an action. An action is a level of access; for instance, the actions for java.io.FilePermission are read, write, execute, and delete [API 2011]. The "Permission Descriptions and Risks" guide [Permissions 2008Oracle 2008b] enumerates the default permissions and the risks associated with granting these permissions to Java code.
...
| [API 2011] | Class FilePermission Class SecurityManager |
| [Oaks 2001] | Chapter 5, "The Access Controller," "Permissions" |
| [Oracle 2012c] | Permissions in Java SE 7 Development Kit (JDK) |
| [Oracle 2008b] | Permissions in the Java™ SE 6 Development Kit (JDK) |
| [Policy 2002] | "Permission Descriptions and Risks" |
...