Hi Francisco,
When you initially configured the ZoneDirector, one of the first things it requires is that you set a login password for the admin account. Unless you've given that password to your users, they will not have any access to the ZD administrative functions. The connected AP's inherit the same login credentials and so are similarly protected.
Did I mis-understand your question?