Permission user

Hi all!

I have one ArcSDE Geodatabase, user 'sa' is owned Default version. I create a new version (in arccatalog) and privilege user sa1 permission are delete, update, insert to this new version.

When i connect to database in arccatalog by user sa1, i can edit new version but can't edit default version. But why I connect to database directly in SQL Server by user sa1, I can edit data in database? That' mean: user sa1 can not edit on ArcMap but can edit in SQL?

I want to create a user only edit on new version (on ArcMap) but can not edit data by connect to sql (as user sde).

Help me!