Developer's Guide to Web Application Security

There is also the option to select the code base to which that permission applies.

The code base argument appears just after the word grant.

grant codeBase "java.sun.com/" {

permission java.io.FilePermission "/temp/*", "read,write";

};

The codeBase target (in quotations) is always a URL.The URL can also apply

to a local file system, however. In the preceding line, the permission applies to all

classes located in the root directory of Sun’s Java Web site.This means that only code

originating from the Sun Web site will be granted limited permission. If there is a

signedBy argument as well, it can occur before or after the signedBy argument.

grant codeBase ...