Tomcat Server.xml permissions for W2k3 server. Users have R and E rights. Is that ok?

Hi! What's the default user permissions to the Tomcat Server.xml file on a Windows 2003 MS? Is read and write appropriate or a security risk? Thanks!