Correct this is the way to go. In the unix world e.g. you'd do a lot more using file permissions. At least MP should handle the write protection everywhere and not crash ;)