Normal User able to add "Module" in article? ; How to allow user to upload media/picture directly to blogpost

Hi Support,

1. Referring to attached, Farah is only a normal registered user, why is she allowed to add "Module" and "Article" in the front end? Kindly advise where to set this.

2. How do we enable users to upload pictures to be embedded in blogpost directly, and not just a picture link?

Thanks