in fact it is not so difficult. You can independently sign the applet, and then it will be able to read / write to / from the local file system outside the limitations of the isolated environment. see link below. it will show you how to sign the applet with keytool, and the example does read / write to the file system. no need to guess policies files, etc.
Please note that, as @aioobe noted, the user will be asked to accept the certificate.
source share