You could remotely modify the permissions on the .BMP file to allow normal users to update just that file.