How Do I Create a User Role that Can Only CRUD a Single Content-type?
The Permissions section is broken out across content types. You can create a new group, put that user into it, and give that group permission to CrUD one or more content types. Allow this user no other permission in any other content type (outside of calendar).

To overcome the 'overview' page problem, is View published content checked?