I have one csv file for WordPress using. It put under my theme folder. I don’t want that open to public but only a js file under the theme folder can read it and retrive data.

How should I set the permission?

I have set the csv file permission to 640, it cannot open on the browser, but my js file cannot read it as well.