Hi Phil,
Please add the user account to {coldfusion-home} and give Read attributes, Read extended attributes and Read permissions.
A list of permissions is defined for webserver at section 2.2.3.1 Web Root Content Security Permissions of http://www.adobe.com/content/dam/Adobe/en/products/coldfusion/pdfs/cf1 0/cf10-lockdown-guide.pdf and the ColdFusion level permissions are mentioned at 4.1.2 Setup Permissions on ColdFusion installation directory
Regards,
Anit Kumar