I have the following code, I get a standard prompt when renaming/deleting which prevents those actions from happening. Upload/View work great (also, new folder creation worked too when I had that enabled). The C# running on postback or not makes no difference.
"The selected file could not be deleted because the application did not have enough permissions. Please, contact the administrator."