Hi. This maybe a newbie question. I am working on a database for the my employer. Essentially each document that is created within the DB needs to have an electronic signature attached. I call up the electronic signature from a JPEG file.
My problem is that the file and folders are setup as such:

x:/database/db
x:/database/sig_files

I had given complete rights to everyone because pretty much everyone requires access to the DB. However, management is concerned about rights to the electronic signature files. If I change the rights to the signature folder - users that call up documents in the DB cannot see the signatures and of course the signatures do not print. Is there a way to link to the JPEG files securely so that the users can view the signatures in the documents within the DB but not have rights to the actual JPEG files?
Hopefully that makes sense.

Thanks.

No not really because the database application runs with the current users credenditials and the files are accessed using the same credentials.

you could protect them better storing them in BLOBS but this a practice I avoid.

It's possible you could do something "hacky" through using runas.
If you create an account that has access to the sig files then within the application code use run as to gain access that may work. I'm not convinced this is even possible and it's terribly hacky.

A web based application you allow you to protect these files.
Maybe you could migrate you software to the web or a small part of it.

Also some basic file encryption algo could do it. so essentially you encrypt the files so the user cant access them directly but the application knows how to decrypt them.