How to restrict user to upload documents to Webcenter Spaces group and PersonalSpaces group

In content server User Admin, I define a role in Security and only allow this role to access certain folders but not WebcenterSpaces and PersonalSpaces security groups.

But in WCP content manager component UI, when I upload a file, I can see my designated security group and WebcenterSpaces as well as PersonalSpaces in dropdown list. And I am able to upload the file to those security groups.