Have a type of permission for contacts and documents that is limited, to only view those contacts and documents associated with that user, but at the same time it is only reading mode. So that it does not allow the user to create, edit or delete any of those documents that they view.