Remote access to a Minecraft server over SSH

I have a dedicated server running Ubuntu Server 18.04. I'm going to be hosting a Minecraft server for someone. What's the best way to restrict their read, write, and execute access to _only_ the Minecraft server directory? They'll also need access to Java to run the server.