If you haven't mapped a login to a user in a database and granted it access to the database, the login can't even open the database. Even when there is a user in a database it can only do what you've given it permission to do. See "permissions [SQL Server]" in BooksOnLine.

This works the same in SQL 2000 as it does in SQL 2005.