You could use Parental Controls from System Preferences. The 'Only allow selected applications' option allows you to set which apps a standard (ie. non-admin) user can access normally. All other apps can still be seen but require an admin password to open.
jx