Securing hobbit

Hi, we have been setting up hobbit for our company over the last couple of weeks and it is a brilliant product! We were originally planning on allowing anyone within the company to see the pages, but now we have been asked to limit access to each department head and the department heads can only see the results for equipment in their department. We have divided the bb-hosts file up using the PAGE function, but wanted to know if there is a way to explicitly allow one or two people to see the page for a specific department.

We also want to publish the site and use authentication to get to it, what is the best way to meet both these goals?