Limit user access

We have gotten an application that will read and display logs in a report format. The application need a user name and password to access the AIX servers where the logs reside. My problem is the logs are in a few different file systems on the server. Is there any way to lock the user to only the log directories? For example logs are located in /var/logs, /opt/application/logs and /logs. I want the user to have access to the 3 logs directories but not other areas of the server.

What about a chroot with hard links to the three directories???