[rsbac] Question about capability of RSBAC (but more precisely and corrected)

[Tigran S. Avanesov]

Is it possible to configure RSBAC to be such thing:
for selected users, each file they create has rw- --- --- rights, and he
(user) could not change its (file) rights (rw- --- ---)?

 Thanks in advance,
    Tigran