1. A method of providing security enforcement of widgets in a computer system having a processor and a memory, comprising: extracting access control information from a widget; based on the access control information, generating access control rules; providing the access control rules to a trusted portion of the computer system outside of user space code of a Web Runtime (WRT) system; and delegating security checking of the widget, using the access control rules, from the WRT system to the trusted portion; wherein, during runtime of the widget, at least a portion of the security checking of the widget is performed by the trusted portion.