This is what the earlier reports meant by a “locked mailbox.”
When you set up a dedicated SFTP account, the user has access to only one directory on a server, and they only see what you copy into that one folder.