Well, how you decide when to apply the restricted permissions is a different question :wink:
Depending on your business logic for that decision, you'd probably need a script to run on content creation. Check the documentation for help creating rules and scripts (there's a link in my signature below)