Is there a way to prevent manager users from adding resources under specified parent directories?
Try putting the directories you want to protect into a Manager Resource Group, create a Managers User Group for people who should be able to edit them and create children under them. Then connect the Resource Group with the User Group. That should hide them from everyone else.