Please don't put everything under the default root folder. File storage does this and it is just plain evil, because by default then content inherits permissions without regard to the mounted package instance controlling that content.
This means in dotLRN for instance that when default folders for a class are created the default perms have to be wiped out and explicitly set to the proper values so that only class members can read files private to the class, etc.