Something

<Anonymous /home/repo>
        User repo
        Group www-data
        RequireValidShell off
        <Directory *>
                <Limit WRITE STOR>
                        DenyAll
                </Limit>
        </Directory>
        <Directory */incoming>
                <Limit STOR CWD>
                        AllowAll
                </Limit>
                <Limit READ RMD DELE MKD>
                        DenyAll
                </Limit>
        </Directory>
</Anonymous>