It is possible to use API calls ImpersonateLoggedOnUser, LogonUser, RevertToSelf and others to switch to another user credentials inside the running VFP application.

Access permissions for the data directory can be granted to only this particular user and to the admin group.