In installshield express you cannot only define installation directories, you can also define the read/write permissions there, no post-installation routine needed to set that.
Don't know if you ever used the installshiled express coming with VFP8/9, but it's quite simple: In an ISE project in the installation designer tab in section 2 - "Specify Application data" you choose "Files". There's a frame called "Destination computer's folders". You typically have [ProgramFilesFolder]/Companyname/Appname[INSTALLDIR] in there. If you want to change permission on that folder (not recommended, though) you can choose the INSTALLDIR, then rightclick, choose properties, click "Permissions" and then add the needed permissions there.
Bye, Olaf.