Assuming that the path to the file that you put in the database is accessible from a web application other than admin (no matter how it sounds), the file just has to go somewhere that both applications have access rights to. Only the administrator should have write access.
You can configure which user account the IIS website will launch under the website properties> Directory Security in the IIS Management Console. Then just set the appropriate permissions for the directory.
roryf source share