It:setfacl

sudo su - (as special user, eg rzepa)

setfacl -R -d -m u:user1:rwx,u:user2:rwx /var/www/html/<somefolder> (folder only)

setfacl -R -d -m u:rzepa:rwx /var/www/html/rzepa/blog/wp-content/uploads/2015/06

setfacl -R -d -m u:user1:r /var/www/html/<somefolder> (folder only, to remove write and execute privs)

setfacl -R -m u:user1:rwx,u:user2:rwx /var/www/html/<somefolder> (files in folder)

getfacl <somefolder> allows you to see the acl for a file

To loosen up permissions for upgrade use:

sudo chown -R apache:webmaster /var/www/html/rzepa/blog/wp-content

To tighten them up use:

sudo chown -R rzepa:webmaster /var/www/html/rzepa/blog

sudo chown -R apache:webmaster /var/www/html/rzepa/blog/wp-content/uploads

/usr/local/bin/wpsetperms --lock or --unlock