Forum OpenACS Q&A: login + password for special pages...

My scenario is a such:

One of our users has a personal page on our site that he wants his friends to see but not before they entered a login + passwort that our user can set up and change at all times... (This site could be mysite.com/page.tcl?user_id=xyz) He doesn't want his friends to login though!

Additionally he has some files in the file-storage that he also wants them to see after having entered the right login+password combination...

I am still running on 3.2.5! Any hints how I could accomplish this?