how do i prevent users from uploading to their root folder (which auto-created upon registration), but allow creating of subfolder?
User cannot upload to folders, but just to albums. Depending on your setup, they can just create albums in their personal gallery AND/OR create albums in public categories AND/OR upload to public albums, that already exist. I already told you to read the docs, so please do this now!