I have a developer who wants to check website files on the server. In the past, this developer has made changes that broke the website.
In order to avoid unwanted file editing, I need to grant the developer access in some sort of read-only role.
The hosting is on DirectAdmin.

Question is: How can I create a FTP/SSH user with read-only (and perhaps download) credentials?

Help and suggestions to achieve this are highly appreciated.