How to create read-only user

My scenario is like this - Bank has already a server and running up application. We want to create a user who has only read-only to any file except his own file. We don't want to change existing file permission level. Just want to create a read-only user