OK, so we run as Windows Authentication on the SQL Server Management Studio so I am guessing I will need to change that otherwise they can flick back from SQL Server Auth and see both databases right?
No, Windows Authentication is fine, but it does require that the apps use two different logins, or two different AD groups. Oh, and if someone belongs to both AD groups, they'll get access to both databases.
