I'm not sure that I agree with this requirement. Why rollback certain people's statements? Wouldn't it be better to not grant them permissions to create objects in the first place.
Sure, you can implement the requirement with a DDL trigger, but I am not sure that this is the right solution.
Can you give some background to why you want to do this?