[CentOS] Mixing FTP and HTTP file transfers

How do I deal with this?

A content management system which writes to a user's directory as user apache.

A customer that wants to be able to FTP through a FTP client and vsftpd those same files up and down, which is presently set to work with only their username.

I don't want everything set 777 or even 707. Is there a way to allow a particular user to download and upload files owned by apache, and I would assume, when uploading, those files will need to be chown apache so the CMS can access and update them?

I'm looking for a best solution which is not going to be troublesome in the future and which is not going to have adverse effects on security.

Thanks, John Hinton