[makemyworkforme]

Can you create a group and set a sticky bit for ACLs for your root for the filesystem with read permissions for that group? That way all files created under the filesystem root will have read permissions for that user, but you cannot modify anything.

[dmd]

Not really, there are tons of different filesystems mounted from all over the place. It's a mess.