You could disable the login, or remove permission to the specific database(s) so they can still access other databases.