Using Matrix-based Authorization Strategy plugin, a user needs Administer rights to be able to manage/upload plugins. It seems "UploadPlugin" rigths does not allow to upload plugins.

We cannot access plugin manager pages without Administer rights. So we cannot upload plugins.