I never understood why the default value for this setting was "true". IMHO, all access should be denied by default, unless explicitly granted. Is there any chance the default will be flipped in future versions?
[Message sent by forum member 'vladchuk' (vladchuk)]
http://forums.java.net/jive/thread.jspa?messageID=245097