Currently there is nothing from stopping a Passare user from going into a case and deleting a case file. We currently have existing permissions from checklist tasks being deleted as well as internal notes.
Marlan Gary has brought this to my intention that he needs to be able to control via role who can and cannot delete uploaded case files.