Yes, that's browser security. This restriction is enforced by browsers to prevent malicious code from manipulating the content of a page residing in another domain, thus, your "permission denied".
The solution to this problem typically involves the addition of a DNS record.
Here's an knowledge base article that discusses one possible solution along those lines.
[ March 26, 2002: Message edited by: Brian Glodde ]