How secure is the ssh access for users?

OK but if I read this topic I understand than I have to set nologin option.
However my user need is to access on their apache2 logs in realtime, and sometime scp and rsync commands.
So for now, is there a jailed ssh access to the home directory or not yet ?