http://docs.webfaction.com/software/general.html#granting-access-to-specific-users
permits locate, but deny apps
setfacl -m u:nano:--x $HOME
setfacl -m u:nano:--- $HOME/webapps/*
The above command only affects applications that are currently installed. If you create new applications, you will need to run that command again, or secure the application individually with
setfacl -m u:secondary_username:--- $HOME/webapps/name_of_new_app.
current / new files / main group
setfacl -R -m u:nano:rwx $HOME/webapps/nano
setfacl -R -m d:u:nano:rwx $HOME/webapps/nano
chmod g+s $HOME/webapps/nano
setfacl -R -m d:u:marlus:rwx $HOME/webapps/nano
create link
ln -s /home/marlus/webapps/nano ~/nano