Users can upload their photos too.

1. Authorize upload on any physical categories (Administration » Categories » Manage » edit or Administration » Categories » Properties » Upload). Virtual categories can't receive any upload.
2. Give write access on corresponding directories.

Photos uploaded by users are not directly visible on the website. An administrator must validate uploaded photos in Administration » Photos » Waiting.