"Herby" <prmarjoram@gmail.com> wrote in message
news:7f3cf9b0-c63d-46b0-93fe-f5036d96f931@s50g2000hsb.googlegroups.com...
On 7 Jul, 11:45, Herby <prmarjo...@gmail.com> wrote:
> Hi,
>
> Im writing a simple document tracking and storage application. The
> documents are being stored under a given root folder. This root
> folder is specific to the application. The application will create
> folders and files on a regular basis as documents are tracked under
> this root folder. The application will have many users authenticated
> by the application itself.
>
> The crunch of the matter is other than the owner of the folder i only
> want to allow access to this root folder and all its children to the
> application itself - Is this possible?
>
> Else it would seem outside of the application, users could go into
> this folder and make changes which is highly undesirable for me as
> each document is synchronised with a database meta record.
>
> In a sense it would be analogous to a version control system using the
> filesystem as its medium of storage, you dont want to allow
> modifications to this storage area outside of the version control
> system itself.
>
> Could anyone help me on this matter?
>
> Thanks.


Can anyone help me on this?
If file security can only be applied to users, can a program take on
the identity of a user?

Users have permissions. Programs access files which the user has the
permissions required to access the file.
If there is a way for a program to determine the permissions which the user
possesses, then you might be able to solve your problem.
Jim