Security object

I'm going to start a COM object that basically checks user password only. If the password is okay, then i return the an interface pointer of an object that the application request for, but by the way, how can i disable that all objects must use the security object to obtain a pointer to the target objects ???

One of the approaches you can try is - have all your other components aggregated by the Security component. Also you need to modify the ClassFactories of all components to ensure that they are created as aggregated components to the Security component only.
Hope this helps.