Look under Administration > Site Settings > Security > Permissions
You will see settings for "Roles than can upload and browse", "Roles that can upload and browse but only from a user specific folder"
Click the help links next to these settings for info.
Hope it helps,
Joe