postgres accounts on server: password authentication

hi! i want to set up multiuser accounts for postgres,on a single 
server. i need to know about password authentication, i use 
postgres 7.0. for databases under postgres, creator is owner, but 
anybody can login as the user..there seems to be no password 
authentication at all.. waiting for a reply suchir.