If this is not best done from within AutoEDMS, in ACL, is there a script, executable, etc., that anybody is calling from AutoEDMS to set permissions in this fashion?

Our goal is to copy work files to a work area using AutoEDMS, and then lock down NTFS permissions on the work copy so that no one but the assigned author can edit the document whether he or she gets to it thorugh AutoEDMS or not.

Another approach, of course, is to have a separate directory for each user, but for the moment we're trying to avoid that.

Thanks for any comments or references to existing ACS or other material that would answer the question.