I have a website running on apache with the web root folder at /var/www.
I have different people managing different aspects of the website.
- Designers accesses /var/www/images and /var/www/media
- Developers access /var/www/code
- A 3rd party outside contractor accesses /var/www/code/3rd_party_code.
The entire /var/www/ is owned by www-data as that is what apache is run as.
Is there any Linux users and/or grouping permission scheme I can use to make sure people are only able to change their parts of the website? Note also there is some overlap. For instance, developers can also see the 3rd party code. Also, designers access different folders (/var/www/images and /var/www/media) and chroot will not work (I think!).
Access will be only via SFTP. I will disable ssh shell access as necessary. This is on Ubuntu 12.04.5 LTS.