Security Question

[zaboboa]

Hello, I have an application that saves files to the server. Users don't have the righ to edit any of the documents in the file system. One way to do it, is to use impersonation to modify the files, however in Win 2000 for impersonation to work one has to modify the security policy, which poses the security risk. So my question is, how can I allow the users to modify files on the file system only through the application? Thank you.