Hello, yes both have permission to upload media.
So much so that if I upload the media by User 2, it replaces the image registered by User 1, woe to log in with the User 1 I do not see the image upload made by User 2.
A note even if the User 2 do not change the image box if he change any text field and click save, to add the photo to the User 1 uploaded.