Try it for yourself. Create a new login with the restricted permissions and log on as it. See what you can see and see what you can do. It may be that there are some objects that are always displayed and you just have to live with it. Bear in mind that the user will be able to see all objects that the public role has any permissions on.

John