it doesn't have any permission on any other database...i want to disable security,managment to that user

please check the attachment user can see 'sa'(i want to restrict it)