First thank you for you reply!But you suggestion still can't slove my problem.
I draw my work here:
1 submit form using webscript
2 read the content of form and write it to a file
3 the file is created in a space which auto execute a script to initialize a serial review workflow.
So the person submitting form should have write permission in the space,but he don't have read permission.I create a role in the permissionDefinitions.xml,but it doesn't work.The follow is the part of my configuration:
<permissionGroup name="Writer" allowFullControl="false" expose="true" >
<includePermissionGroup permissionGroup="AddChildren" type="sys:base"/>
</permissionGroup>
Do you have other suggestion? Thank you!