Share the directories they should not have access to, but do not assign any permissions to them. Thus they will vanish from the users view and access.
↧