FileField Permissions- How can I allow users to upload a file without giving them the ability to remove files that have been uploaded?
Try to add a second file field via the field UI; to set the permissions for a single field you could use hook_field_access().