Limiting a user to a single or subset of databases in a cluster?

Of course, one can create a user that has no useful privileges on a
particular database, but is there a way of limiting a user to being
able to log into only a single one of, or a subset of, the databases
in a cluster?

--
-- Christophe Pettus
    xof@thebuild.com