Hello Muhammed, not only read/write but also create/delete rights are neccesary for the user.
Are you using any microflow upon accepting/submitting that file? If yes, check the security for that microflow as well.
Moreover, check console, it will tell you exactly which place your security is missing/incomplete.