I know this might not be the answer you are looking for, but ACL (Access Control List) is a very granular permission, assigned to every each file, not to users or directories. And as far as I know there is no such thing as extended ACL on AIX. There are base file permissions, as in Owner:rwx, Group:rwx and Others:rwx, which are common UNIX knowledge. Then come attributes, i.e. setuid, setgid and savetext, which are lesser known but for a seasoned unix admin, they should be quite obvious. And lastly come the extended attributes which are commonly referred as ACLs, assigned to every each file, one by one. These are (directly copied from IBM's definitions):
permit: Grants the user or group the specified access to the file
deny: Restricts the user or group from using the specified access to the file
specify: Precisely defines the file access for the user or group
For the exact usage of how these values can be set or removed, you need to see the man page for acledit on your AIX system.
After having said all of this, I don't believe this is what you need considering your special case with ftp jailing. If you are planning to have anonymous type ftp and don't want incoming parties to access above the home directory you set for this user(s), you need to see the document at IBM's website, guiding you step-by-step, how to enable anonymous ftp. Document can be found at:
If anonymous ftp is not your concern but you want to create a jailed ftp environment for a user who will log in with a preset username and password, then you should consider something like a proftpd, install and usage details of which, can be found at:
It is in French but I am sure you can use google translate to make it English if you absolutely want. proftpd is an rpm package installable on IBM P series servers running AIX. The document says AIX v5.2 but there shouldn't be much change for 5.3 and later versions.
I hope this gives you a starting point. But again, curious minds may wonder, in this day and age, where security is a critical concept, why one might want to use an insecure protocol like ftp instead of using something like scp. Just think about it.