If building an intranet, we would want users to be able to upload images for their own documents (eg, news items, blog entries and so on). However, access to media seems to allow users to also replace images on existing media.

Therefore, they could presumably replace furniture (eg, site logo etc) as these would all be in the media folder.

I understand that users can be given a starting folder for the media tree (similar to that for editing documents), so we could set up a 'User Media' folder for example, however, this would mean editing every single user to set their starting point, as there doesn't seem to be any way of doing this en masse eg by roles or user grouping.

Is there another solution, eg saving furniture in another way so that only admins can edit them?