That's a bad way of doing that because if you change your template, it will never update without you redoing the permissions. The better way would be to deny direct access to the .tpl files.