Hi,
users by default are allowed to create cells from folders in workspaces they have write access to. This should no longer be the case when changing the setting core.auth.USER_CREATE_CELLS to false (via UI or via pydio.json). However, this setting appears to be ignored as even with the setting changed a user is still able to create cells (standard user, default settings apply).