Server: debian4 / apache2 / php5
I have a vps and i usually only run websites that I administer, so I have loaded everything up under one username.
Now I have an external developer doing some work, and would like to give them access to one of my websites, but not the rest of them.
I also thought it would be a good idea to run all the websites as separate users, so if they get hacked or something, they can't wreck the other sites on the server.
Apache is running as www-data
I have run
chown -R myusername:www-data httpdocs chmod -R 0750 httpdocs so now it looks like drwxr-x---myusername www-data httpdocs
Is that the right way to go about securing this?