ach
Give edit (or read or no) permissions to the root namespace and then give create (or upload or delete) permissions to each of your first level namespaces. (Admittedly, that could get a bit labour-intensive if you have a lot of first level namespaces.)