Have come to a sort of compromise, set apache as the group & applied 664 permissions to everything