AFAIK...at the share level users need full control....then you can use the security tab (file and folder permissions)and further define what the users\ groups and do

instead of the Everyone group you can use Authenticated Users

MLF