The best approach to separating user privileges is to have one part running as a daemon, under the root user, and to send commands from the web part to the other part, for example by creating a file in a special directory or by connecting to a pipe or (domain) socket.