You need to do implement aaa on the PIX. An example is given on CCO, but based on the 5.2 and 5.3 code on:
http://www.cisco.com/warp/customer/110/atp52.html
If you are using 4.2.1 code, the syntax would be a bit different and you really not need the access-list, but you use the outbound/inbound commands to provide exceptions. See the aaa command set on:
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_v42/pix42cfg/pix42cmd.htm#xtocid120131