What’s Java Web Start doing?
Java Web Start launches full-featured applications with a single click on a web page link. If the application is not present on the local system (i.e. if the application is launched for the first time) Java Web Start automatically downloads all necessary files required to run the application. It stores the files on your local computer so the application is ready to be relaunched anytime, either from the web link or from the Java Web Start application. When relaunching a Java Web Start application Java Web Start will download modified resources so that you always have the most current version.

Applications launched by Java Web Start, by default, run in a restricted environment (a “sandbox”) with limited access to files and network. Since the VBRC Java Web Start applications may need access to files on the local system, a printer in the local network, or the content of the clipboard, an alert window is displayed asking if permission can be granted to do so.
A Java Web Start application can also request unrestricted access to the local system. These applications have what is called a digital signature, which is intended to be an indication of the application’s trustworthiness. In this case, Java Web Start will show a Security Advisory dialog when the application is launched for the first time. The security warning will show information from the signature about the origin of the application, i.e. the vendor who developed it.
To accept this application’s request, click “Start”. To see more details on the request and Dr. Chris Upton’s Java Certificate, click “Details”. If you wish not to accept the request, click “Exit”. Choosing “Exit” will cause the program to close.
Once the Workbench Application has downloaded, it is like any other program that you might run on your local system, therefore it needs access to the system to function properly.