Anyone allow file attachments only?

[system]

We're on 8.03.409 and would like to give some users access to attach files to parts, customers and suppliers, but don't whant them to have update ability to those records. Is there a simple way to do this?
Thanks,
Ed