Click on Settings and go to Roles & Access


Click the Client Role tab


Under each client type, you will need to change the access level for the different file types to high. This will give the client the ability to upload, but not delete files.