I think this won't work ... you are trying to allow the as yet unregistered user to exercise permissions they do not yet have.
First get the user registered and with a correct role, and when they log on with that role granted, then use a photo module that has workflow permissions. I believe Ventrian's Simple Gallery would have that kind of permissions/work flow.
You can create a security role which is public and let the user know how to use "Manage Services" to subscribe to that role.
This scenario requires four steps: 1) register 2) Manage Services to select role 3) log off and log back on to initialize new privileges 4) navigate to the photo module to upload images.
I beleve that you can combine the first three steps into one if you use a custom registration module such as that offered by UCanUse, though I have not use it myself.
Personally, I find step 3 above rather distasteful ... I think that whenever any user navigates away from "Manage Services" that their permissions should be refreshed, rather than only at login. Those should be the two times that a user's permissions are renewed.