Eric BARROCA writes:

.... I've tried many configuration but if an user can add files, he can modify and delete other's files... Adding objects is usually protected by "Add <object>" while changing them is protected by "Change <object>" and object deletion by "Delete objects".

Thus, you can separate creation (granted to "Anonymous") from changing (granted to "Owner" and "Manager") and deletion (same as for changes). Dieter