It would be fine to add the upload permission separately.
Reason:
If all user can access to media not belonging to them they can connect foreign media to their own content, so that visitor think that those media are the own work of the user which created the node.

Additional I would also need the won't fix: https://drupal.org/node/992978 to enable the owner of the file to edit it.

Comments

Chris Matthews’s picture

Chris Matthews CreditAttribution: Chris Matthews as a volunteer commented
Status: Active » Closed (outdated)

Closing this issue as outdated. However, if you think this issue is still important, please let us know and we will gladly re-open it for review.
sincerely,
- the Drupal Media Team