Hello,
In this case, I guess your authentication mechanism should be "security = user". In that case, you can create a new unix account, a new unix group, add newly created account to that group and set the directory's permission to that user and group.
Three users, on trying to...