So, for noone to be able to delete a file, you need to not have the D set in the
protection mask, and also, the owner of the file needs to be someone else, or else people
can always change the protection to allow the deletion.
All that said, the same applies for modifying a file. For that you need write access.
Now, there is no way for you to allow people to create files remotely on your machine
without them also having write access to the files. And besides, naturally they will be
the owners of the files if they create them.
The best I can think of here is to just set a default protection so that newly created
files at least by default have a protection that don't include D (and possibly exclude
both E and W as well).
The second part of this is actually making the files visible in the specific library. For
this users need write access to the directory (and possibly extend access). In order to
find the files, you need read access. For removing files from a directory, you need write
access to the directory.
So obviously, you either allow both entering and removing, or neither.
Johnny