[DarkDeviL]

Create a very simple plugin, with e.g. a command like "sm_restartgame" that sends "mp_restartgame 1" as ServerCommand().

That way, you can override and restrict sm_restartgame (and any of the other commands you make) to a specific level, and be sure that no one can touch the server's settings with either sm_cvar or sm_rcon.

If you're attempting (and even seem to be succeeding) with restricting sm_cvar or sm_rcon to certain functionality, you might be overlooking something else that can cause similar consequences as messing up your database.

So if this is really what you are looking for, making people have access to one thing such as e.g. "mp_restartgame 1", but not certain other things, make a separate command for that particular thing, and educate your 'admins' to use that new functionality instead of sm_cvar/sm_rcon.