NTFS Add & Read Directory Permissions

From: Erwin Richard (erwin@richard.net)
Date: 01/23/02 

From: "Erwin Richard" <erwin@richard.net>
Date: Wed, 23 Jan 2002 22:56:58 +0100

I need to setup a directory on NTFS so that a user can only copy/move a new
file there but
later cannot delete or modify it.
I understand that I can change the Directory to "Add & Read" permissions but
then the owner of the newly
created file can still modify its permissions(?).

The normal problem of an application first creating and then writing to the
file is not an issue
here as I can change the App to always write to a temporary directory on the
same partition
and then move the file there.

What's the best way to implement such a "write once only" directory?

Alternatives I am thinking about:

a Change the Ownership of the file programmatically from the application if
possible(?)
b Write a service on the Server that gets notified as soon as a new file is
placed in the directory
   and changes its permissions/owner

The solution has to be sound in order to prevent even knowledgable
users/developers from modifing
files after they were initially placed in the directory.

Thanks for your Ideas

Erwin

Relevant Pages