Separates permissions for subsuser

I would like to request a feature for sub-user settings that separates file editing and downloading permissions. So there would be a permission where a sub-user can edit files but cannot download them