I'm looking for a simple method to disallow edition at the top level of a multilingual web site, so only content of language folders can be modified (by non-admin users).
By changing the
Modify Portal Content permission for the related content to
Do not assign global roles.
Put all editors users in a group, assign the group to all language root folders (LRF) with the local roles needed.
This works with global roles:
rolemap.xml to your profile where role contributor/ editor do not get any default add/edit/... permissions.
Create a workflow assigned to the LRF where editors regain those permissions.