Users can upload their photos too.

1. Authorize upload on any physical category (Administration » Categories » Manage » edit or Administration » Categories » Properties » Upload). Virtual categories can't receive any upload.
2. Give write access on corresponding directories.

Photos uploaded by users are not directly visible on the website. An administrator must validate uploaded photos in Administration » Photos » Waiting to accept or reject the proposed photos.