If it is the permissions on the directory that are the problem, then you may be able to change the owner of the logs directory and then give the application rw permissions. That way the application will be able to write its logs, but would not be able to change permissions on the directory.
i will investigate all options given, thanks all
the issue is that this is a somewhat automated process in that a machine is installed, applications deployed and brought into service as an automated process so i cant check all the time to make sure permissions are OK, ie world readable on logs.
i think to solve this i need to delve into the deploy to see why the permissions are being reset -