I'm using a number of JSON files with AJAX so I set the permissions to 640 to stop the world from being able to view them but by doing so AJAX then doesn't work...

What gives? Is there a work around for this?