If you are using TS 6.7.1, the easiest way to do this would be to create custom roles and then by choosing the restrict option.
Its not working. If we do the changes in permission to 770 then user having the problem in generating, submitting the file..Please help for this issue...