I am seeking for a freeware where can restrict the user priviledge on a certain folder.

The scenario is like this:
I've create a web application where the user can upload their picture onto the web. However, for privacy and security issue, I do not want to let anyone who has access to the server, such as the staff of webhosting company, to copy, or access into the folder and delete/update the user's picture content or file name etc.

Is there any freeware can handle this? I only want to grant the access to the web application itself, other than that, no one will be able to access the folder including me unless I write a script and put into the web application folder as part of the application.

Btw I am also researching on which method provides better security and privacy, whether to restrict the access to the uploaded file folder or put the file into the database and restrict the particular table to only the application can access.

Which method is better solution? How to achieve this? Any recommendation?

Please advise.

Thanks in advance

If I were you, I would rather encrypt the file. To access the file, you can download it straight, but to read the file, you need a Decrypting module. Limit access to the Decrypting module. Cheers.

it's called user groups and advance permission on an NTFS & NFS file system and built into the windows server family.

i see, so how to set to only certain application can access? i only know how to restrict a user only.

the previous advice was for the first part of your scenario.

I do not want to let anyone who has access to the server, such as the staff of webhosting company, to copy, or access into the folder and delete/update the user's picture content or file name etc.

for this second part, im a sysadmin and not a developer, so i haven't a clue. on the admin side of things, i know that web applications can take advantage of the windows authorization and authentication to gain priveleges (such as in the case of putty for telnetting, ftp, ASP.NET process identity or ACLs through IIS). you might need to try your luck in codemasters subforum or the msdn library.

http://msdn2.microsoft.com/en-us/library/default.aspx

I only want to grant the access to the web application itself, other than that, no one will be able to access the folder including me unless I write a script and put into the web application folder as part of the application.

trying my luck in codemaster now, heh, thanks ya anyway!

if anyone else feel like leaving somemore comments pls do so