Stephen,
create a grass-users group in unix (you could call it GISUSR)
and make both the "grass" account and the application users members of the
group.
this, from what i understand should work,
good luck 
rica
saporta@smokey.foretry.utoronto.ca