If you don want the module in module list , modifiy __openerp__.py
and set installable='False' ... that will hide the module form enlisting for instalation..
after that you should update modules list.
If module is still visible execute something like this from any db management tool ,(pgadmin3, psql etc..):
delete from ir_module_module where name='your_module_name';
Also.. you can remove admin rights from user, and he will not be able to install anything..
(better way)
But i'm realy not sure if you can selectivly allow/deny instalation of certain modules... while other are not restricted..
In general.. user which have rights to install modules (usualy admin) ,
should know what he is doing, and should be responsable for any actions he does..
hope it helps