How can I set the security up such that my customers can add attachements but can't edit the pages?
Currently, attachments are assumed as a greater privilege than editing, so this configuration is not possible. Attachment upload access can be limited from users who would normally be able to edit, but not vice versa.
[t. teague] Thanks for the input, I guess that makes sense.