Currently when using content explorer for box. we create ollaboration for user and even downscope the token to limit access. but there is no way where we can allow user to upload file only and prevent folder creation at same location.