This is one of the DH security things I've not looked at. Between conversations of the hosting owner having access to everything and then the next email saying that only the "user" has access to their own files I think I've managed to get off.
I'm sure one of our guys that has done this more often will be able to help.
You do NOT have to make a subdomain to have access to their files. That would be a bit of a pain and a security issue.
Wholly - IS NOT MY PROMO CODE. Even worse, I don't get any credit for it. Use WhollyMindless for full credit. I'm really disappointed in someone.