Hello dzidek23,
thank you for your suggestion. Unfortunately that is not a viable option if i understand your suggestion correctly. Following your suggestion, everytime someone creates a subfolder, that person has to remember to manually deny permissions. Since there are multiple people involved with different technical skill levels and they are mostly not using the web interface, this approach will not work in practice.