The setup on the folders themselves should be ok (you can confirm by placing a non-shortcut document in there). Since these documents are shortcuts though, you'll need to ensure the user has read on the actual document the shortcut is pointing to, not just the shortcut itself. To confirm this, you need to check the effective rights from the original document, rights on the shortcut only matter for browse, rename, delete, read/modify security (since all other actions actually take place on the original document itself).