Hi,
Permissions are not at the file level but at the page or feature instance level.
Users in roles with edit permissions on the page or feature instance can upload.
Users in roles with view permissions on the page and the feature instance can download.
The only way that autnenticated users can upload is if you set the edit permissions to allow it.
Hope it helps,
Joe