Is it possible to control the type of payment that a user can upload?

Yes, a user can only upload payments for an account that they have the relevant payment or transfer entry permission for. There are four types of payment entry: Faster Payments, CHAPS, International and Inter Account Transfers.