Server: debian4 / apache2 / php5
I have a vps and i usually only run websites that I administer, so I have loaded everything up under one username.
Now I have an external developer doing some work, and would like to give them access to one of my websites, but not the rest of them.
I also thought it would be a good idea to run all the websites as separate users, so if they get hacked or something, they can't wreck the other sites on the server.
Apache is running as www-data
I have run
chown -R myusername:www-data httpdocs
chmod -R 0750 httpdocs
so now it looks like
drwxr-x---myusername www-data httpdocs
Is that the right way to go about securing this?