Hm, the way you're doing it won't work if the person is actually going to try to access the programmes (they can just change $PATH again), but if what you're doing is only for testing purposes then change the line in .bash_profile to:
Code:
PATH=$HOME/programs
export $PATH
That should mean they can only access programmes in /home/tester/programs