This is not how it works. You use password to authenticate the login. After the login was authenticated, it can use the permissions that he got. If you don't want a login to work with your database then don't give him permissions to use this database (e.g. don't map his login to a user in the database and don't enable the user guest on this database).

Adi