If you download the applet  and then run it using the appletviewer
instead of in the browser, the Applet is allowed to read certain
files, which are marked on the access  control list. If you only use
the browser, the Applet will have to be signed by a party marked as
trusted before it is allowed to access any files.

See http://java.sun.com/sfaq/ for more on security.