Set upload permission via members / email notification via hook?

Problem to solve:
Allow secretary to upload PDF file, get URL to send via email to email address alias for entire company. I trust secretary not to upload bad files.

Would the simplest way be to put form on page restricted by members plugin roles, to limit access? Would I then use a post filter to echo URL? Is the form variables stored in a hash array that I would have access to?

Any help appreciated, I hate to be tied to a desk for mundane tasks when I can empower them to do it themselves. But I don't want to spend the time training them to use the backend.

Thanks Danny

It is a large company, 500+, and she (a group of admins as it were) usually does it in advance, and then waits until the time to send it, basically a draft waiting to be sent.

There have also been time when they send the wrong one, and need to change it, I don't know that it would be possible to give them access at that level. Some of them are taxed to create a pdf :(.

Anyway, internally how is the variable for the upload stored, as a shortcode only, or would I have access to the full path that I could then parse to build a url?

thanks,
Danny