You need to put ["DB restriction"] in quotes, as in 'production'. Or if you want more than one restricted db: 'db1','db2'
That works fine now.
But the rest of the question remains: the inaccessible databases, users and groups still show up, even though the user is allowed to access only one non-admin database.
