@karlenigma we had to give edit permissions to the user role, then create a workflow to lock the record down, it still allows them to upload files to the record