IFS folder and contents read only access for a specified user

["Steinmetz, Paul" <PSteinmetz@xxxxxxxxxx>]

I need to restrict access to an IFS folder, contents, and subfolders for a specific user.
New items arrive in this folder 3x per day.
Currently, the folder permissions are as below.

At first, it was decided to make a copy of the folder for the restricted user.
This will be a manual process, might get messy/sloppy.

Another approach would be to give only that user read only access.

Is this easily done?
How?
Would *PUBLIC have to change?

		     	--Object Authorities--	-------------Data Authorities-------------
			Exist  Mgt  Alter  Ref	Objopr  Read  Add  Update  Delete  Execute
*PUBLIC     *RWX         X     X     X     X		X      X     X     X       X        X   
CS_GRP      *RWX         X     X     X     X		X      X     X     X       X        X  

Thank You
_____
Paul Steinmetz 
IBM i Systems Administrator 

Pencor Services, Inc. 
462 Delaware Ave 
Palmerton Pa 18071 

610-826-9117 work 
610-826-9188 fax 
610-349-0913 cell 
610-377-6012 home 

psteinmetz@xxxxxxxxxx 
http://www.pencor.com/