Login for editors, choice of operations

For now, the login routine and the selection of operations to perform is a very simple page, with the content:

[!WebLogin? &loginhomeid=`685`!]
<br />
<a href="admin/post-edit.html">New blog post</a><br />
<a href="admin/post-manage.html">Manage blog posts</a>

I just use a browser bookmark to jump to this page. For a production site, you could add an "Admin" link to the footer, or send editors an email with a link to the page, if you don't want to attract attention from hacker robots.

Access to the admin pages is restricted by creating a document group for that editors belong to, and attaching the pages to that group. Or is it the other way round?