What rights should one give to a user who requires read access only tocertain documents ??? or how should the security design be if you need topermit read access to only one set of documents and not other???