I warned you there would be lots of questions...

 

What about a 3rd permission group?

Admins - Full tilt uploads etc
Registered - Simple, no upload but can browse folders
Staff - Simple - Uploads to specified folders.