I do agree that using the forums permission system is the best bet; passwords are horrible security to rely on, as they can be easily given out; utilizing the grouping system in the UBB to add members makes it just that much easier to revoke them from those groups.