you can define:
Where a user can read (view), Upload to (Upload) of Delete (Delete) - a simple definition can look like this:
Here all paths are the same - if let's say /ReadOnlyFiles is not allowed to be written I would only place it in ViewPaths like this:
Snippet created with CBEnhancer
PS: if this post was helpful please use "Mark as answer"