Small garage of one Ford in the big internet
So we want to create a sftp-only user with rw-access to certain folder, which located in home directory of another user
/etc/ssh/sshd_config.d/
and put next text to itMatch User ftp1 AllowTcpForwarding no X11Forwarding no PermitTunnel no AcceptEnv LANG LC_* ForceCommand internal-sftp
/etc/fstab
/home/admin/web/site.com/public_html/images /home/ftp1/images none defaults,bind 0 0
setfacl -R -m "u:ftp1:rwx" /home/admin/web/metbiz.ru/public_html/images
mount --bind /home/admin/web/site.com/public_html/images /home/ftp1/images
This must be enough. You got your limited user. Test it.