When you give a user the permission to Upload in the Sales or Purchases invoices folder, this automatically gives access to the View/Edit functionalities. The View/Edit permission setting includes the Publish feature also.

If you want a user to upload documents only without being able to access the edit or publish features, you have two options:

You can give a user access to the Expenses Report folder only. This section is separate from the Sales and Purchases folder and its publication feature. They can upload invoices as expenses. Another user can then approve them and move them to the Purchases folder before publication.

As an alternative, you can give a user access to the File management folder only. This allows users to upload documents before they’re sent to processing and before there’s any charge. Another user can move the documents to the other Purchase or Sales folders for processing.