If a user has "add" permission and if tags are displayed on picture page, he can edit related tags by clicking "edit" icon.
Permissions are attached to users status (guest, generic, normal user, administrator, webmaster). Users can do an action (add, delete) if they have status greater than configured one's.
Users can delete tags they added before submiting form, even if you don't want users delete related tags.