To restrict the user from accessing a database, do not give the user a username and password for that database.