There are two ftp users: admin (with full access to the site files) and user. How server-side user account ftp can deny access to some files / folders? For example, to all executable scripts (php, etc.), prohibit downloading the same files, prohibit access / change / download .htaccess?
The user should be able to upload files, texts, html-pages, scripts, images, but no more.
The server uses Plesk Panel, it does not have access settings of this kind, so you need it yourself :)
Addition:
I began to deal with the settings .ftpaccess and came across such a moment:
<Directory *> HideFiles ^\.(ftpaccess|htaccess)$ PathDenyFilter "(\\.ftpaccess|\\.htaccess)$" </Directory>
This allows you to hide some files from the scope (HideFiles), as well as to prohibit editing these files (PathDenyFilter).
To prohibit viewing files for a specific user, you can use the following construction:
HideFiles ^\.(ftpaccess|htaccess)$ user myuser
when connecting via ftp, the user "myuser" will not see the specified files, but he can still change them. I tried to solve this problem in an obvious way:
PathDenyFilter "(\\.ftpaccess|\\.htaccess)$" user myuser
but it didn’t work.
Therefore, the question remains relevant: How to prevent the user from editing / downloading some files via ftp?