Certain JNLP APIs such as FileOpenService, FileSaveService, and PrintService show a security dialog even though there is a subsequent dialog that requires the user to interact with the application to provide the required information. The security dialog can be eliminated if we require that these services be the result of a user initiated action. In other words the application may only invoke these services in response to a user initiated action, such as a mouse click. The action also must be completed within a certain amount of time. This means that the user knows what application they are interacting with.
The user initiated action requirement is used in other technologies such as Silverlight, Flash, and web browsers so it is not a new concept.
The user initiated action requirement is used in other technologies such as Silverlight, Flash, and web browsers so it is not a new concept.