Adopted authority in a Windows Server environment

Group,

I've been given the task to investigate whether it is possible to use some
kind of adopted authority in Windows.

Here's what we want to setup:

We currently have a document publishing application, triggered by the user
in our iSeries application, which uses Lotus Notes. The document is
picked up by a Notes agent and sent to a Win2K file server.

We want/need to eliminate Notes, and replace it with an other package,
which would work by monitoring a folder somewhere on the network.

The idea is to let the user pick a file to publish (triggered from our
iSeries application), and drop the file in the "watched" folder.

However, we want to prevent the user from dropping the file via other
means (DOS copy, Explorer drag&drop, etc).

So what we need is a way to secure write/modify/delete access to the drop
folder, so that only the application can put files there.

Is this at all possible?

I did quite a lot of googling, but could only find answers relating to
i5/OS (of course).

Thanks in advance,

Peter Colpaert
Application Developer
PLI - IT - Kontich, Belgium
-----
Yoda of Borg are we. Futile is resistance, assimilated will you be.
-----