Restricting access to certain directories with proftpd, possible?

Does someone have done this? I've been google around, but no luck yet.

Code:

DefaultAddress 127.0.0.1
<VirtualHost 82.103.XXX.XXX>
        DefaultRoot             "~/web"
        AllowOverwrite          on
        Umask                   002
</VirtualHost>

I want restrict access to the directory
~/web/somedir
so a given ftp user should _not_ be able to browse it or download anything from it. Any hints?

 

Ah, found it

Code:

        <Directory ~/your_dir>
          <Limit ALL>
              DenyAll
          </Limit>
       </Directory>