1. A method of providing security enforcement of widgets in a computer system having a processor and a memory, comprising: extracting access control information from a widget, generating access control rules, and providing the access control rules to a trusted portion of the computer system outside of the user code space of a Web Runtime (WRT) system; and delegating security checking of the widget, using the access control rules, from the WRT system to the trusted portion of the computer system; wherein at least a portion of the security checking of the widget in a runtime environment is performed by the trusted portion of the computer system.