Create a Linux User with Only SFTP Access
You should prohibit users within a Linux server from creating a SSH session and only allow them to connect to the SFTP in certain environments such as web hosting. Here is a guide on how to configure your Linux server to work this way.
Server Administration 