This week's book giveaway is in the OCMJEA forum. We're giving away four copies of OCM Java EE 6 Enterprise Architect Exam Guide and have Paul Allen & Joseph Bambara on-line! See this thread for details.
Depends on the view layer. You may not be able to, if the view layer can instantiate arbitrary classes, at least not without some trickery. Which cannot possibly be worth it in almost all situations. What are you so afraid of that you must absolutely restrict access to your app's classes?