I have been having problems allowing Irfan to upload files to his web root directory in his home directory without having the webserver being forbidden from serving his site. It turns out that it works if I chown -R his directory with irfan:www-data (www-data as set as group in apache2.conf) and chmod -R everything to 755.