As things stand, a user can access all the catalogs (which also means all db's under the catalogs) from any workspace that is Unity catalog enabled. For the time being, it's not possible to bind catalogs to a workspace. However, from what I know, this feature is supposed to come out later this year.