how to protect users to save AfO workbook into non menu SAP BW role

Hi,

I have deployed approach specified via below link to grant users auth to folders so they can save their AfO workbooks:

https://blogs.sap.com/2018/01/23/analysis-office-role-folder-in-sap-netweaver-platform/

Role colored red contains folders where users can save their modified workbooks. Role colored green contains authorization to objects.

My question : users are still allowed to save data into folder colored green. How this can be prevented as I want them to work only with folders colored red.

See attachment

Thanks