I am learning RMI and have created a RMI client and Server which passes a custom object over to perform actions on it and then returns it back to the client.

Now, most of the tutorials I have read say you need to use a 'Security Manager', in my example I haven't but it still works..... the other tutorials specify that you need to initiate a security manager in order for it to trust the objects it is passing over.

So how comes I don't need one, did this change in a later version of Java (using Java 7u51).

Both RMI client and server are aware of my custom class.

Thank you in advance