I'm managing a Zen Cart store for a customer who is selling t-shirts. Amung other requests, he has shirts that are available to the general public, but also wants to sell shirts for organizations through his site that aren't for the general public, such as company shirts, etc.

He wants to password protect the products that are to be restricted.

I was thinking it would be better to assign a token when the product is created which can be called from a URL or if it doesn't exist require it to be submitted before the product can be viewed.

I've searched the forums several times and searched through all the contributions and can't find anything to offer this solution, or a similar one.

Does anyone have any recommendations of how to do this?

I'm not afraid to try to code it myself, but I'm not so familar with altering the backend of Zen Cart. What files would I need to alter to make it happen?

The cart is the latest 1.3.9h with image handler, zen lightbox and google analytics addons installed.