How to create a user with only a few commands available to him

Hi

I need to create a user that basically have only read access, but I beleive that is not possible, so how provide him with limited commands, like (he should not have to do 'rm' , 'mv')