Is it possible to allow user only installation of certain apps?
It is possible, there are apps available that are designed for enterprise use such as SureLock and MobiControl (go to Device LockDown Policy on this page) that will restrict users to allowed applications only.