When you grant access to a user that does not have a corresponding login - the user will show as inactive in that database but will still have those permissions when they access the database.
You will see this if you grant a domain account permissions - but that domain account gets access to the system through a windows group and that windows group has access to the database.