I wish to create a document library to be used by a school to manage students hand-in of homework and assignments. Two groups are relevant: Students and Teachers.
The Students should be able to upload files to the library, however not edit or delete own files. In addition the students in the Students group should only be able to see their own files and not other students files.
Teachers should be able to see all Students files, edit and delete these.
I have previously managed similar requirements by workflows removing the Students permissions and granting new ones to the student and Teachers as soon as a file is uploaded. I wonder if there is a more appropriate solution?