> That means I can deny/allow call for getClassLoader method for any Java
> procedure that is declared.

The getClassLoader() method is a specific case defined in the Java
security specification.

> So I write MyClass.myProcedure and register it in FB.
>
> If MyClass.myProcedure calls a denyed method, JVM will throw a exception.
>
> We'll not allow calls for non-registered methods directly from the database.

See my recent post: a) you can't do it; b) you don't want to do it. :)

Roman