The current Vault roles combine permissions for editing files and folders. If these were separate roles, users could be prevented from creating their own folder structure, but would retain the ability to check-in, move, rename, and perform any other actions on the files themselves. The exception would have to be in cases when the software generates the folder (i.e. Frame Generator, etc.)