Abstract: A method is provided for providing security. The method involves separating classes into a trusted class and an untrusted class, associating privilege information with the trusted class, and controlling access to the trusted class by the untrusted class based upon the privilege information associated with the trusted class. The untrusted class may be granted a privilege used to control access to the trusted class. Granting the privilege may be based upon one or more permissive attributes of the privilege information. Based upon this privilege, access to the trusted class may be permitted or refused.