Yes, with Java you can. That's how the web/application server containers worked (probably still do, but I've been disconnected). The server classes have differ

Yes, with Java you can. That's how the web/application server containers worked (probably still do, but I've been disconnected). The server classes have different permissions from the application code classes (loaded from the .war/etc files). If an application code method calls into a system class, the permissions which apply are those or the application since that method is in the calling stack frame. I wrote this support into several Java web container and J2EE application server products back in the day. AFAIK, all that still works great today in Java.