Block download for users

Is there a way we can block the download of files for certain users, but they can upload or read?

I know you can block access by using the File Access Control, but you can’t make there a difference between upload and download. Am i right?

And even if it can be configured, the problem will still be that the file is downloaded to the cache of the browser when reading the file, I guess…

@roykato seems to have a similar question: Block download ability for a group?