Let's change the Tree Permissions of the user, so you can actually limit the access of the user to a specific tree.