You would set them to have “Read” permissions:

View = they see the file in the list but cannot download
Read = they can download it
Modify = they can check-out/check-in the file
Admin = they can modify the file settings

Posted in: Usage