Well at least with hard links that's not strictly true. Using official win32 apis you need write permission on the file you're linking to so you can't link to say a system file as a non admin. Try mklink with the /H switch.

Of course that's a bit of a lie, if you use the NtSetInformationFile api you don't need write access :-)