I found this handy blog post with regards to setting up your server so that certain users only have access to certain areas of the server via SFTP while not having any SSH access.