This article about Java security says:
Code in the Java library consults the Security Manager whenever a dangerous operation is about to be attempted.
Using security manager you could control access to :
For each such thing there is a check*() method in SecurityManager
For an exhaustive list check the constants in SecurityConstants