Anybody managed to restrict creation of objects at product root AND allow use of “select folder”

Hello all,

Objectives which I have already achieved using subfolder permissions and ACL sub domains

• 
  
• Prevent "create" or "create by move" of any folderable object to the product root (including the creation of more folders)
• 
  
• Have a collection of root folders, each corresponding to an object type. Root folders cannot be deleted, moved, or renamed
• 
  
• Within each root folder allow users to create subfolders, rename them and even delete if empty
• 
  
• When a new object is created it's default location is set by OIR to appropriate root folder
• 
  

• Problem is the select folder option seems to insist that "create" permission exists within root of product (default domain) for the object in concern. This of course conflicts with the initial requirements.
•