Hi There
A login allows a user to connect to the SQL Server it DOES NOT allow the users permissions to any of the databases.
The logins is then mapped to a User. The user can then access the database you give them permissions to. If you want the user to do anything with the database you must give them permissions, to select / insert / delete information from tables or views or execute permissions on the stored procs. You can add them to a role and give permissions to the role, any user you is added to the role, inherits the role's permissions (like groups in Windows NT).
Hope This Helps
Bernadette