Create 501 user for Read-only cdrom

sudo adduser –uid 501 tmpuser;

sudo passwd tmpuser;

restart and login as tmpuser; (not listed on login screen because uid is less than 1000, but you can go ahead).

You can change neither permission nor ownership of files on the cdrom because you cannot change the cdrom’s  file system, but you can copy files to somewhere where you can do anything.