If I'm not mistaken the backend is protected by a login. Also, you can make a custom role for users limiting their possibilities in the backend to only the parts that they are authorized to have access to.
Is there no login screen when you go to the backend of the installation?