[Zope] security for nobody

Friends of Zope, I am a Zope newbie who wishes to allow access only to a limited number of users (10) on a MYSQL database in Zope. The users are web novices and not very technical savy. The way I setup Zope is that the user nobody comes in a web server using the approach: htttp:\1526.125.145:9673\directory1\index.html How can I password the *database* directory from casual browsers? I would like a password prompt appear and then have them log in. Has anyone done this and How did you do it?